GSI Authorization API

Initialize Handle

• globus_result_t globus_gsi_authz_handle_init (globus_gsi_authz_handle_t *handle, const char *service_name, const gss_ctx_id_t context, globus_gsi_authz_cb_t callback, void *callback_arg)

Authorization decision made here

• globus_result_t globus_gsi_authorize (globus_gsi_authz_handle_t handle, const void *action, const void *object, globus_gsi_authz_cb_t callback, void *callback_arg)

Destroy Handle

• globus_result_t globus_gsi_authz_handle_destroy (globus_gsi_authz_handle_t handle, globus_gsi_authz_cb_t callback, void *callback_arg)

Query for authorization identity

• globus_result_t globus_gsi_authz_get_authorization_identity (globus_gsi_authz_handle_t handle, char **identity_ptr, globus_gsi_authz_cb_t callback, void *callback_arg)

---

Function Documentation

globus_result_t globus_gsi_authz_handle_init	(	globus_gsi_authz_handle_t *	handle,
		const char *	service_name,
		const gss_ctx_id_t	context,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Initializes a handle.

Parameters:

handle	Pointer to the handle that is to be initialized
service_name	Service to authorize access to
context	Security context used to contact the service
callback	Callback function to call when authz handle init completes
callback_arg	Argument to callback function

Returns:

GLOBUS_SUCCESS if successful A Globus error object on failure:

globus_result_t globus_gsi_authorize	(	globus_gsi_authz_handle_t	handle,
		const void *	action,
		const void *	object,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Authorization decision made here.

Parameters:

handle	Pointer to the handle that is to be initialized
action	Action to authorize
object	Object that the action pertains to.
callback	Callback function to call when authorization completes
callback_arg	Argument to callback function

Returns:

GLOBUS_SUCCESS if successful A Globus error object on failure:

globus_result_t globus_gsi_authz_handle_destroy	(	globus_gsi_authz_handle_t	handle,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Destroy a Globus GSI authz handle.

Parameters:

handle	The handle that is to be destroyed
callback	Callback function to call when handle is destroyed
callback_arg	Argument to callback function

Returns:

GLOBUS_SUCCESS

globus_result_t globus_gsi_authz_get_authorization_identity	(	globus_gsi_authz_handle_t	handle,
		char **	identity_ptr,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Query for authorization identity.

Parameters:

handle	The handle that is to be used for the identity check.
identity_ptr	The authorization identity determined by the authorization handle. This is must be freed by the caller. If the value is NULL (and this function returned GLOBUS_SUCCESS), the caller should use the authenticated identity.
callback	Callback function to call when identity is determined.
callback_arg	Argument to callback function.

Returns:

GLOBUS_SUCCESS