The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]

Интерактивная система просмотра системных руководств (man-ов)

 ТемаНаборКатегория 
 
 [Cписок руководств | Печать]

krb_realmofhost (3)
  • >> krb_realmofhost (3) ( Solaris man: Библиотечные вызовы )
  • 
    NAME
         krb_realmofhost,       krb_get_phost,        krb_get_krbhst,
         krb_get_admhst, krb_get_lrealm - additional Kerberos utility
         routines
    
    SYNOPSIS
         cc [ flag ... ] file ... -lkrb [ library ... ]
         #include <kerberos/krb.h>
         #include <netinet/in.h>
    
         char *krb_realmofhost(const char *host);
    
         char *krb_get_phost(const char *alias);
    
         int krb_get_krbhst(char *host, const char *realm, const  int
         n);
    
         int krb_get_admhst(char *host, const char *realm, const  int
         n);
    
         int krb_get_lrealm(char *realm, const int n);
    
    DESCRIPTION
         krb_realmofhost() returns the Kerberos  realm  of  the  host
         host,    as    determined    by    the   translation   table
         /etc/krb.realms. host should be the fully-qualified  domain-
         style primary host name of the host in question. In order to
         prevent certain security attacks, this routine  must  either
         have  a  prior  knowledge  of a host's realm, or obtain such
         information securely.
    
         The  format  of  the  translation  file  is   described   by
         krb.realms(4).   If  host  exactly matches a host_name line,
         the corresponding  realm  is  returned.  Otherwise,  if  the
         domain  portion  of  host  matches  a  domain_name line, the
         corresponding realm is returned. If host contains a  domain,
         but  no  translation is found, host's domain is converted to
         upper-case and returned.  If  host contains  no  discernible
         domain,  or  an  error occurs, the local realm name, as sup-
         plied by  krb_get_lrealm(), is returned.
    
         krb_get_phost() converts the hostname alias  (which  can  be
         either  an official name or an alias) into the instance name
         to be used in obtaining Kerberos tickets for most  services,
         including  the  Berkeley  rcmd suite (rlogin, rcp, rsh). The
         current convention is to return the  first  segment  of  the
         official domain-style name after conversion to lower case.
    
         krb_get_krbhst() fills in host with the hostname of the  nth
         host  running  a  Kerberos key distribution center (KDC) for
         realm  realm,  as  specified  in  the   configuration   file
         (/etc/krb.conf  or  krb.conf  NIS  map).  The  configuration
         format is described by  krb.conf(4). If the host is success-
         fully  filled  in, the routine returns KSUCCESS. If the file
         (or NIS map) cannot be accessed, and n equals  1,  then  the
         hostname  kerberos  is filled in, and  KSUCCESS is returned.
         If there are fewer than n hosts running a Kerberos  KDC  for
         the requested realm, or the configuration file is malformed,
         the routine returns  KFAILURE.
    
         When there is both a local /etc/krb.conf and a krb.conf  NIS
         map,  then  the  entries are counted starting first with the
         local file, then continuing with the NIS map.  For  example,
         if  the  local /etc/krb.conf file contains two entries which
         match realm, and the NIS map contains  one  matching  entry,
         then  there are three possible matches that krb_get_krbhst()
         can return. The first two (for n values 1 and 2)  come  from
         the  file,  and  the third (for n equal to 3) comes from the
         map.
    
         krb_get_admhst() fills in host with the hostname of the  nth
         host  running  a Kerberos KDC database administration server
         for realm realm, as specified in /etc/krb.conf. If the  file
         cannot  be opened or is malformed, or there are fewer than n
         hosts running a Kerberos KDC database administration server,
         the routine returns KFAILURE.
    
         The   character   arrays   used   as   return   values   for
         krb_get_krbhst() and krb_get_admhst() should be large enough
         to hold any hostname.
    
         krb_get_lrealm() fills in realm with the nth  realm  of  the
         local  host,  as  specified in the configuration file. realm
         should be at least  REALM_SZ (from <kerberos/krb.h>) charac-
         ters long. The return value is either KSUCCESS or KFAILURE.
    
    ATTRIBUTES
         See attributes(5) for descriptions of the  following  attri-
         butes:
    
         ____________________________________________________________
        |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
        |_____________________________|_____________________________|
        | MT-Level                    | Unsafe                      |
        |_____________________________|_____________________________|
    
    
    SEE ALSO
         kerberos(3KRB), krb.conf(4), krb.realms(4), attributes(5)
    
    FILES
         /etc/krb.realms
               translation file for host-to-realm mapping.
    
         /etc/krb.conf
               local realm-name and realm/server configuration file.
    
    NOTES
         These interfaces are unsafe in  multithreaded  applications.
         Unsafe  interfaces  should  be  called  only  from  the main
         thread.
    
    BUGS
         The current convention for instance names  is  too  limited;
         the full domain name should be used.
    
         krb_get_lrealm() currently only supports  n equal to  1.  It
         should  really  consult the user's ticket cache to determine
         the user's current realm, rather than consulting a  file  on
         the host.
    
    
    
    


    Поиск по тексту MAN-ов: 




    Партнёры:
    PostgresPro
    Inferno Solutions
    Hosting by Hoster.ru
    Хостинг:

    Закладки на сайте
    Проследить за страницей
    Created 1996-2024 by Maxim Chirkov
    Добавить, Поддержать, Вебмастеру