The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]

Интерактивная система просмотра системных руководств (man-ов)

 ТемаНаборКатегория 
 
 [Cписок руководств | Печать]

krb5_kt_resolve (3)
  • >> krb5_kt_resolve (3) ( FreeBSD man: Библиотечные вызовы )

  • BSD mandoc
    HEIMDAL  

    NAME

    krb5_kt_ops
    
     
    krb5_keytab_entry
    
     
    krb5_kt_cursor
    
     
    krb5_kt_add_entry
    
     
    krb5_kt_close
    
     
    krb5_kt_compare
    
     
    krb5_kt_copy_entry_contents
    
     
    krb5_kt_default
    
     
    krb5_kt_default_name
    
     
    krb5_kt_end_seq_get
    
     
    krb5_kt_free_entry
    
     
    krb5_kt_get_entry
    
     
    krb5_kt_get_name
    
     
    krb5_kt_get_type
    
     
    krb5_kt_next_entry
    
     
    krb5_kt_read_service_key
    
     
    krb5_kt_register
    
     
    krb5_kt_remove_entry
    
     
    krb5_kt_resolve
    
     
    krb5_kt_start_seq_get
    
     - manage keytab (key storage) files
    
     
    

    LIBRARY

    Kerberos 5 Library (libkrb5, -lkrb5)
     
    

    SYNOPSIS

       #include <krb5.h>

    krb5_error_code Fo krb5_kt_add_entry Fa krb5_context context Fa krb5_keytab id Fa krb5_keytab_entry *entry Fc Ft krb5_error_code Fo krb5_kt_close Fa krb5_context context Fa krb5_keytab id Fc Ft krb5_boolean Fo krb5_kt_compare Fa krb5_context context Fa krb5_keytab_entry *entry Fa krb5_const_principal principal Fa krb5_kvno vno Fa krb5_enctype enctype Fc Ft krb5_error_code Fo krb5_kt_copy_entry_contents Fa krb5_context context Fa const krb5_keytab_entry *in Fa krb5_keytab_entry *out Fc Ft krb5_error_code Fo krb5_kt_default Fa krb5_context context Fa krb5_keytab *id Fc Ft krb5_error_code Fo krb5_kt_default_name Fa krb5_context context Fa char *name Fa size_t namesize Fc Ft krb5_error_code Fo krb5_kt_end_seq_get Fa krb5_context context Fa krb5_keytab id Fa krb5_kt_cursor *cursor Fc Ft krb5_error_code Fo krb5_kt_free_entry Fa krb5_context context Fa krb5_keytab_entry *entry Fc Ft krb5_error_code Fo krb5_kt_get_entry Fa krb5_context context Fa krb5_keytab id Fa krb5_const_principal principal Fa krb5_kvno kvno Fa krb5_enctype enctype Fa krb5_keytab_entry *entry Fc Ft krb5_error_code Fo krb5_kt_get_name Fa krb5_context context Fa krb5_keytab keytab Fa char *name Fa size_t namesize Fc Ft krb5_error_code Fo krb5_kt_get_type Fa krb5_context context Fa krb5_keytab keytab Fa char *prefix Fa size_t prefixsize Fc Ft krb5_error_code Fo krb5_kt_next_entry Fa krb5_context context Fa krb5_keytab id Fa krb5_keytab_entry *entry Fa krb5_kt_cursor *cursor Fc Ft krb5_error_code Fo krb5_kt_read_service_key Fa krb5_context context Fa krb5_pointer keyprocarg Fa krb5_principal principal Fa krb5_kvno vno Fa krb5_enctype enctype Fa krb5_keyblock **key Fc Ft krb5_error_code Fo krb5_kt_register Fa krb5_context context Fa const krb5_kt_ops *ops Fc Ft krb5_error_code Fo krb5_kt_remove_entry Fa krb5_context context Fa krb5_keytab id Fa krb5_keytab_entry *entry Fc Ft krb5_error_code Fo krb5_kt_resolve Fa krb5_context context Fa const char *name Fa krb5_keytab *id Fc Ft krb5_error_code Fo krb5_kt_start_seq_get Fa krb5_context context Fa krb5_keytab id Fa krb5_kt_cursor *cursor Fc  

    DESCRIPTION

    A keytab name is on the form type:residual The residual part is specific to each keytab-type.

    When a keytab-name is resolved, the type is matched with an internal list of keytab types. If there is no matching keytab type, the default keytab is used. The current default type is file The default value can be changed in the configuration file /etc/krb5.conf by setting the variable [defaults]default_keytab_name

    The keytab types that are implemented in Heimdal are:

    file
    store the keytab in a file, the type's name is KEYFILE The residual part is a filename.
    keyfile
    store the keytab in a AFS keyfile (usually /usr/afs/etc/KeyFile ) the type's name is AFSKEYFILE The residual part is a filename.
    krb4
    the keytab is a Kerberos 4 srvtab that is on-the-fly converted to a keytab. The type's name is krb4 The residual part is a filename.
    memory
    The keytab is stored in a memory segment. This allows sensitive and/or temporary data not to be stored on disk. The type's name is MEMORY There are no residual part, the only pointer back to the keytab is the Fa id returned by krb5_kt_resolve (.);

    krb5_keytab_entry holds all data for an entry in a keytab file, like principal name, key-type, key, key-version number, etc. krb5_kt_cursor holds the current position that is used when iterating through a keytab entry with krb5_kt_start_seq_get (,);
    krb5_kt_next_entry (,);
    and krb5_kt_end_seq_get (.);

    krb5_kt_ops contains the different operations that can be done to a keytab. This structure is normally only used when doing a new keytab-type implementation.

    krb5_kt_resolve ();
    is the equivalent of an open(2) on keytab. Resolve the keytab name in Fa name into a keytab in Fa id . Returns 0 or an error. The opposite of krb5_kt_resolve ();
    is krb5_kt_close (.);
    krb5_kt_close ();
    frees all resources allocated to the keytab.

    krb5_kt_default ();
    sets the argument Fa id to the default keytab. Returns 0 or an error.

    krb5_kt_default_name ();
    copy the name of the default keytab into Fa name . Return 0 or KRB5_CONFIG_NOTENUFSPACE if Fa namesize is too short.

    krb5_kt_add_entry ();
    Add a new Fa entry to the keytab Fa id . KRB5_KT_NOWRITE is returned if the keytab is a readonly keytab.

    krb5_kt_compare ();
    compares the passed in Fa entry against Fa principal , Fa vno , and Fa enctype . Any of Fa principal , Fa vno or Fa enctype might be 0 which acts as a wildcard. Return TRUE if they compare the same, FALSE otherwise.

    krb5_kt_copy_entry_contents ();
    copies the contents of Fa in into Fa out . Returns 0 or an error.

    krb5_kt_get_name ();
    retrieves the name of the keytab Fa keytab into Fa name , Fa namesize . Returns 0 or an error.

    krb5_kt_get_type ();
    retrieves the type of the keytab Fa keytab and store the prefix/name for type of the keytab into Fa prefix , Fa prefixsize . The prefix will have the maximum length of KRB5_KT_PREFIX_MAX_LEN (including terminating NUL ) Returns 0 or an error.

    krb5_kt_free_entry ();
    frees the contents of Fa entry .

    krb5_kt_start_seq_get ();
    sets Fa cursor to point at the beginning of Fa id . Returns 0 or an error.

    krb5_kt_next_entry ();
    gets the next entry from Fa id pointed to by Fa cursor and advance the Fa cursor . Returns 0 or an error.

    krb5_kt_end_seq_get ();
    releases all resources associated with Fa cursor .

    krb5_kt_get_entry ();
    retrieves the keytab entry for Fa principal , Fa kvno, Fa enctype into Fa entry from the keytab Fa id . Returns 0 or an error.

    krb5_kt_read_service_key ();
    reads the key identified by ( Fa principal Fa vno , Fa enctype ) from the keytab in Fa keyprocarg (the default if == NULL) into Fa *key . Returns 0 or an error.

    krb5_kt_remove_entry ();
    removes the entry Fa entry from the keytab Fa id . Returns 0 or an error.

    krb5_kt_register ();
    registers a new keytab type Fa ops . Returns 0 or an error.  

    EXAMPLE

    This is a minimalistic version of ktutil

    int
    main (int argc, char **argv)
    {
        krb5_context context;
        krb5_keytab keytab;
        krb5_kt_cursor cursor;
        krb5_keytab_entry entry;
        krb5_error_code ret;
        char *principal;
    
        if (krb5_init_context (&context) != 0)
            errx(1, "krb5_context");
    
        ret = krb5_kt_default (context, &keytab);
        if (ret)
            krb5_err(context, 1, ret, "krb5_kt_default");
    
        ret = krb5_kt_start_seq_get(context, keytab, &cursor);
        if (ret)
            krb5_err(context, 1, ret, "krb5_kt_start_seq_get");
        while((ret = krb5_kt_next_entry(context, keytab, &entry, &cursor)) == 0){
            krb5_unparse_name_short(context, entry.principal, &principal);
            printf("principal: %s\n", principal);
            free(principal);
            krb5_kt_free_entry(context, &entry);
        }
        ret = krb5_kt_end_seq_get(context, keytab, &cursor);
        if (ret)
            krb5_err(context, 1, ret, "krb5_kt_end_seq_get");
        krb5_free_context(context);
        return 0;
    }
    
     

    SEE ALSO

    krb5.conf5, kerberos(8)


     

    Index

    NAME
    LIBRARY
    SYNOPSIS
    DESCRIPTION
    EXAMPLE
    SEE ALSO


    Поиск по тексту MAN-ов: 




    Партнёры:
    PostgresPro
    Inferno Solutions
    Hosting by Hoster.ru
    Хостинг:

    Закладки на сайте
    Проследить за страницей
    Created 1996-2024 by Maxim Chirkov
    Добавить, Поддержать, Вебмастеру