ext

ext

Synopsis

const char *        gss_check_version                   (const char *req_version);
int                 gss_oid_equal                       (const gss_OID first_oid,
                                                         const gss_OID second_oid);
int                 gss_userok                          (const gss_name_t name,
                                                         const char *username);
OM_uint32           gss_encapsulate_token               (const gss_buffer_t input_token,
                                                         const gss_OID token_oid,
                                                         gss_buffer_t output_token);
OM_uint32           gss_decapsulate_token               (const gss_buffer_t input_token,
                                                         const gss_OID token_oid,
                                                         gss_buffer_t output_token);
extern              gss_OID_desc GSS_C_NT_USER_NAME_static;
extern              gss_OID_desc GSS_C_NT_MACHINE_UID_NAME_static;
extern              gss_OID_desc GSS_C_NT_STRING_UID_NAME_static;
extern              gss_OID_desc GSS_C_NT_HOSTBASED_SERVICE_X_static;
extern              gss_OID_desc GSS_C_NT_HOSTBASED_SERVICE_static;
extern              gss_OID_desc GSS_C_NT_ANONYMOUS_static;
extern              gss_OID_desc GSS_C_NT_EXPORT_NAME_static;

Description

Details

gss_check_version ()

const char *        gss_check_version                   (const char *req_version);

Check that the version of the library is at minimum the one given as a string in req_version.

WARNING: This function is a GNU GSS specific extension, and is not part of the official GSS API.

req_version :

version string to compare with, or NULL

Returns :

The actual version string of the library; NULL if the condition is not met. If NULL is passed to this function no check is done and only the version string is returned.

gss_oid_equal ()

int                 gss_oid_equal                       (const gss_OID first_oid,
                                                         const gss_OID second_oid);

Compare two OIDs for equality. The comparison is "deep", i.e., the actual byte sequences of the OIDs are compared instead of just the pointer equality.

WARNING: This function is a GNU GSS specific extension, and is not part of the official GSS API.

first_oid :

(Object ID, read) First Object identifier.

second_oid :

(Object ID, read) First Object identifier.

Returns :

Returns boolean value true when the two OIDs are equal, otherwise false.

gss_userok ()

int                 gss_userok                          (const gss_name_t name,
                                                         const char *username);

Compare the username against the output from gss_export_name() invoked on name, after removing the leading OID. This answers the question whether the particular mechanism would authenticate them as the same principal

WARNING: This function is a GNU GSS specific extension, and is not part of the official GSS API.

name :

(gss_name_t, read) Name to be compared.

username :

Zero terminated string with username.

Returns :

Returns 0 if the names match, non-0 otherwise.

gss_encapsulate_token ()

OM_uint32           gss_encapsulate_token               (const gss_buffer_t input_token,
                                                         const gss_OID token_oid,
                                                         gss_buffer_t output_token);

Add the mechanism-independent token header to GSS-API context token data.

input_token :

(buffer, opaque, read) Buffer with GSS-API context token data.

token_oid :

(Object ID, read) Object identifier of token.

output_token :

(buffer, opaque, modify) Encapsulated token data; caller must release with gss_release_buffer().

Returns :

`GSS_S_COMPLETE`: Indicates successful completion, and that output parameters holds correct information. `GSS_S_FAILURE`: Indicates that encapsulation failed for reasons unspecified at the GSS-API level.

gss_decapsulate_token ()

OM_uint32           gss_decapsulate_token               (const gss_buffer_t input_token,
                                                         const gss_OID token_oid,
                                                         gss_buffer_t output_token);

Remove the mechanism-independent token header from an initial GSS-API context token.

input_token :

(buffer, opaque, read) Buffer with GSS-API context token.

token_oid :

(Object ID, read) Expected object identifier of token.

output_token :

(buffer, opaque, modify) Decapsulated token data; caller must release with gss_release_buffer().

Returns :

`GSS_S_COMPLETE`: Indicates successful completion, and that output parameters holds correct information. `GSS_S_DEFECTIVE_TOKEN`: Means that the token failed consistency checks (e.g., OID mismatch or ASN.1 DER length errors). `GSS_S_FAILURE`: Indicates that decapsulation failed for reasons unspecified at the GSS-API level.

GSS_C_NT_USER_NAME_static

extern gss_OID_desc GSS_C_NT_USER_NAME_static;


GSS_C_NT_MACHINE_UID_NAME_static

extern gss_OID_desc GSS_C_NT_MACHINE_UID_NAME_static;


GSS_C_NT_STRING_UID_NAME_static

extern gss_OID_desc GSS_C_NT_STRING_UID_NAME_static;


GSS_C_NT_HOSTBASED_SERVICE_X_static

extern gss_OID_desc GSS_C_NT_HOSTBASED_SERVICE_X_static;


GSS_C_NT_HOSTBASED_SERVICE_static

extern gss_OID_desc GSS_C_NT_HOSTBASED_SERVICE_static;


GSS_C_NT_ANONYMOUS_static

extern gss_OID_desc GSS_C_NT_ANONYMOUS_static;


GSS_C_NT_EXPORT_NAME_static

extern gss_OID_desc GSS_C_NT_EXPORT_NAME_static;