NAME
gss_inquire_cred_by_mech() — provide the calling application per-mechanism information about a credential
SYNOPSIS
#include <gssapi.h>.C
OM_uint32 gss_inquire_cred_by_mech (
OM_uint32 *minor_status ,
const gss_cred_id_t cred_handle ,
const gss_OID *mech_type )
gss_name_t *name ,
OM_uint32 *initiator_lifetime ,
OM_uint32 *acceptor_lifetime,
int *cred_usage)
DESCRIPTION
The
gss_inquire_cred_by_mech()
routine provides per-mechanism information about a credential.
Input Parameters
- cred_handle
Specifies a handle for the target credential. To get information about
the default credential, specify
GSS_C_NO_CREDENTIAL.
- mech_type
Set of security mechanisms for which information should be returned.
Output Parameters
- name
Returns the principal name asserted by the credential. If the principal
name is not required, specify NULL.
- initiator_lifetime
Returns the number of seconds for which the credential will remain
capable of initiating security contexts under the specified mechanism.
If the credential can no longer be used to initiate contexts, or if
the credential usage for this mechanism is
GSS_C_ACCEPT,
this parameter
will be set to zero.
If the implementation does not support expiration of initiator credentials,
the parameter returns the value
GSS_C_INDEFINITE.
If an expiration
time is not required, specify NULL.
- acceptor_lifetime
Returns the number of seconds for which the credential will remain
capable of accepting security contexts under the specified mechanism.
If the implementation does not support expiration of initiator credentials,
the parameter returns the value
GSS_C_INDEFINITE.
If an expiration
time is not required, specify NULL.
- cred_usage
Returns one of the following values describing how the application can
use the credential:
GSS_C_INITIATE
GSS_C_ACCEPT
GSS_C_BOTH
If no usage information is required, specify NULL.
- minor_status
Returns a status code from the security mechanism.
STATUS CODES
The following status codes can be returned:
- GSS_S_COMPLETE
The routine was completed successfully.
- GSS_S_CREDENTIALS_EXPIRED
The credentials expired. If the
lifetime
parameter was passed as NULL, it is set to 0 (zero).
- GSS_S_DEFECTIVE_CREDENTIAL
The credentials were invalid.
- GSS_S_FAILURE
The routine failed. Check the
minor_status
parameter for details.
- GSS_S_NO_CRED
The routine could not access the credentials.
AUTHOR
gss_inquire_cred_by_mech()
was developed by Sun Microsystems, Inc.
SEE ALSO
gss_acquire_cred(3).
The manpages for DCE-GSSAPI are included with the DCE-CoreTools product.
To see those manpages add
/opt/dce/share/man
to
MANPATH.
Printable version
