![]() |
![]() |
![]() |
GNU Generic Security Service (GSS) API Reference Manual | ![]() |
---|---|---|---|---|
Top | Description |
const char * gss_check_version (const char *req_version
); int gss_oid_equal (const gss_OID first_oid
,const gss_OID second_oid
); int gss_userok (const gss_name_t name
,const char *username
); OM_uint32 gss_encapsulate_token (const gss_buffer_t input_token
,const gss_OID token_oid
,gss_buffer_t output_token
); OM_uint32 gss_decapsulate_token (const gss_buffer_t input_token
,const gss_OID token_oid
,gss_buffer_t output_token
); extern gss_OID_desc GSS_C_NT_USER_NAME_static; extern gss_OID_desc GSS_C_NT_MACHINE_UID_NAME_static; extern gss_OID_desc GSS_C_NT_STRING_UID_NAME_static; extern gss_OID_desc GSS_C_NT_HOSTBASED_SERVICE_X_static; extern gss_OID_desc GSS_C_NT_HOSTBASED_SERVICE_static; extern gss_OID_desc GSS_C_NT_ANONYMOUS_static; extern gss_OID_desc GSS_C_NT_EXPORT_NAME_static;
const char * gss_check_version (const char *req_version
);
Check that the version of the library is at minimum the one
given as a string in req_version
.
WARNING: This function is a GNU GSS specific extension, and is not part of the official GSS API.
|
version string to compare with, or NULL |
Returns : |
The actual version string of the library; NULL if the condition is not met. If NULL is passed to this function no check is done and only the version string is returned. |
int gss_oid_equal (const gss_OID first_oid
,const gss_OID second_oid
);
Compare two OIDs for equality. The comparison is "deep", i.e., the actual byte sequences of the OIDs are compared instead of just the pointer equality.
WARNING: This function is a GNU GSS specific extension, and is not part of the official GSS API.
|
(Object ID, read) First Object identifier. |
|
(Object ID, read) First Object identifier. |
Returns : |
Returns boolean value true when the two OIDs are equal, otherwise false. |
int gss_userok (const gss_name_t name
,const char *username
);
Compare the username against the output from gss_export_name()
invoked on name
, after removing the leading OID. This answers the
question whether the particular mechanism would authenticate them
as the same principal
WARNING: This function is a GNU GSS specific extension, and is not part of the official GSS API.
|
(gss_name_t, read) Name to be compared. |
|
Zero terminated string with username. |
Returns : |
Returns 0 if the names match, non-0 otherwise. |
OM_uint32 gss_encapsulate_token (const gss_buffer_t input_token
,const gss_OID token_oid
,gss_buffer_t output_token
);
Add the mechanism-independent token header to GSS-API context token data.
|
(buffer, opaque, read) Buffer with GSS-API context token data. |
|
(Object ID, read) Object identifier of token. |
|
(buffer, opaque, modify) Encapsulated token data;
caller must release with gss_release_buffer() .
|
Returns : |
`GSS_S_COMPLETE`: Indicates successful completion, and that output parameters holds correct information. `GSS_S_FAILURE`: Indicates that encapsulation failed for reasons unspecified at the GSS-API level. |
OM_uint32 gss_decapsulate_token (const gss_buffer_t input_token
,const gss_OID token_oid
,gss_buffer_t output_token
);
Remove the mechanism-independent token header from an initial GSS-API context token.
|
(buffer, opaque, read) Buffer with GSS-API context token. |
|
(Object ID, read) Expected object identifier of token. |
|
(buffer, opaque, modify) Decapsulated token data;
caller must release with gss_release_buffer() .
|
Returns : |
`GSS_S_COMPLETE`: Indicates successful completion, and that output parameters holds correct information. `GSS_S_DEFECTIVE_TOKEN`: Means that the token failed consistency checks (e.g., OID mismatch or ASN.1 DER length errors). `GSS_S_FAILURE`: Indicates that decapsulation failed for reasons unspecified at the GSS-API level. |