Linux Certif

Toute la documentation sur la certification Linux LPI

krb5_compare_creds

BSD mandoc
HEIMDAL

NAME

krb5_compare_creds - compare Kerberos 5 credentials

LIBRARY

Kerberos 5 Library (libkrb5, -lkrb5)

SYNOPSIS

In krb5.h Ft krb5_boolean Fo krb5_compare_creds Fa krb5_context context Fa krb5_flags whichfields Fa const krb5_creds *mcreds Fa const krb5_creds *creds Fc  

DESCRIPTION

Fn krb5_compare_creds compares Fa mcreds (usually filled in by the application) to Fa creds (most often from a credentials cache) and return TRUE if they are equal. Unless mcreds->server is NULL the service of the credentials are always compared. If the client name in Fa mcreds is present, the client names are also compared. This function is normally only called indirectly via krb5_cc_retrieve_cred3.

The following flags, set in Fa whichfields , affects the comparison:

KRB5_TC_MATCH_SRV_NAMEONLY

Consider all realms equal when comparing the service principal.

KRB5_TC_MATCH_KEYTYPE

Compare enctypes.

KRB5_TC_MATCH_FLAGS_EXACT

Make sure that the ticket flags are identical.

KRB5_TC_MATCH_FLAGS

Make sure that all ticket flags set in Fa mcreds are also present in Fa creds .

KRB5_TC_MATCH_TIMES_EXACT

Compares the ticket times exactly.

KRB5_TC_MATCH_TIMES

Compares only the expiration times of the creds.

KRB5_TC_MATCH_AUTHDATA

Compares the authdata fields.

KRB5_TC_MATCH_2ND_TKT

Compares the second tickets (used by user-to-user authentication).

KRB5_TC_MATCH_IS_SKEY

Compares the existance of the second ticket.

SEE ALSO

krb5(3), krb5_cc_retrieve_cred3, krb5_creds3, krb5_get_init_creds3, kerberos(8)