GSSAPI - Online Linux Manual PageSection : 3
Updated : 2022-01-21
Source : perl v5.34.0
Note : User Contributed Perl Documentation
NAMEGSSAPI − Perl extension providing access to the GSSAPIv2 library
SYNOPSIS​ use GSSAPI; ​ ​ my $targethostname = 'HTTP@moerbsen.grolmsnet.lan'; ​ my $status; ​ ​ ​ ​ TRY: { ​ my ($target, $tname, $ttl ); ​ $status = GSSAPI::Name−>import( $target, ​ $server, ​ GSSAPI::OID::gss_nt_hostbased_service) ​ or last; ​ $status = $target−>display($tname) or last; ​ print "\n using Name $tname"; ​ ​ my $ctx = GSSAPI::Context−>new(); ​ my $imech = GSSAPI::OID::gss_mech_krb5; ​ my $iflags = 0 ; ​ my $bindings = GSS_C_NO_CHANNEL_BINDINGS; ​ my $creds = GSS_C_NO_CREDENTIAL; ​ my $itime = 0; ​ my $itoken = q{}; ​ my $otoken; ​ ​ $status = $ctx−>init($creds,$target, ​ $imech,$iflags,$itime,$bindings,$itoken, ​ undef, $otoken,undef,undef) or last; ​ $status = $ctx−>valid_time_left($ttl) or last; ​ print "\n Security context's time to live $ttl secs"; ​ } ​ ​ unless ($status−>major == GSS_S_COMPLETE ) { ​ print "\nErrors: ", $status; ​ } else { ​ print "\n seems everything is fine, type klist to see the ticket\n";
DESCRIPTIONThis module gives access to the routines of the GSSAPI library, as described in rfc2743 and rfc2744 and implemented by the Kerberos−1.2 distribution from MIT. Since 0.14 it also compiles and works with Heimdal. Lacks of Heimdal support are gss_release_oid(), ​gss_str_to_oid() and fail of some tests. Have a look at the tests in t/ directory too see what tests fail on Heimdal ( the *.t tests are just skipping them at the moment) The API presented by this module is a mildly object oriented reinterpretation of the C API, where opaque C structures are Perl objects, but the style of function call has been left mostly untouched. As a result, most routines modify one or more of the parameters passed to them, reflecting the C call-by-reference (or call-by-value-return) semantics. All users of this module are therefore strongly advised to localize all usage of these routines to minimize pain if and when the API changes.
USAGEThis module wraps the GSSAPI C−Bindings. If you are new to GSSAPI it is a good idea to read RFC2743 and RFC2744, the documentation requires you to be familiar with the concept and the wordings of GSSAPI programming. the examples directory holds some working examples of usage: getcred_hostbased.pl gets a GSSAPI Token for a service specified on commandline. (like kgetcred on Heimdal or kvno on MIT) gss−client.pl a simple GSSAPI TCP client. gss−server.pl a simple GSSAPI TCP server. Use both as templates if you need quickhacking ​GSSAPI enabeled GSSAPI TCP services.
GSSAPI::Name​GSSAPI internal representation of principalname Methods import( $gssapinameobj, $servicename, $mechnism_oid ); converts stringrepresentation $servicename of service into a GSSAPI internal format and stores it in $gssapiservicename. input servicename Scalar value, like 'HTTP@moerbsen.grolmsnet.lan'. mechnism_oid Chose one of the predefines mechanism OIDs from GSSAPI::OID output $gssapinameobj ​GSSAPI internal representation of servicename return value returns GSSAPI::Status Object Example: ​ $status = GSSAPI::Name−>import( $gssapinameobj, ​ 'HTTP@moerbsen.grolmsnet.lan', ​ GSSAPI::OID::gss_nt_hostbased_service); display($tname); converts the GSSAPI internal format into a humanreadable string and stores it into $tname. output humanreadable string will be stored into $tname. return value returns GSSAPI::Status Object Example: ​ my $tname; ​ $status = $gssapinameobj−>display($tname); ​ die 'hmm, error...' if($status−>major != GSS_S_COMPLETE ); ​ print "\n Name is $tname"; compare( nameobj, ret) Wraps gss_compare_name(). Input nameobj the 2nd GSSAPI::Name to be compared to output ret value is non-zero names refer to same entity value is zero names refer to different entities. return value returns GSSAPI::Status Object
EXPORT​ GSS_C_ACCEPT ​ GSS_C_AF_APPLETALK ​ GSS_C_AF_BSC ​ GSS_C_AF_CCITT ​ GSS_C_AF_CHAOS ​ GSS_C_AF_DATAKIT ​ GSS_C_AF_DECnet ​ GSS_C_AF_DLI ​ GSS_C_AF_DSS ​ GSS_C_AF_ECMA ​ GSS_C_AF_HYLINK ​ GSS_C_AF_IMPLINK ​ GSS_C_AF_INET ​ GSS_C_AF_LAT ​ GSS_C_AF_LOCAL ​ GSS_C_AF_NBS ​ GSS_C_AF_NS ​ GSS_C_AF_NULLADDR ​ GSS_C_AF_OSI ​ GSS_C_AF_PUP ​ GSS_C_AF_SNA ​ GSS_C_AF_UNSPEC ​ GSS_C_AF_X25 ​ GSS_C_ANON_FLAG ​ GSS_C_BOTH ​ GSS_C_CALLING_ERROR_MASK ​ GSS_C_CALLING_ERROR_OFFSET ​ GSS_C_CONF_FLAG ​ GSS_C_DELEG_FLAG ​ GSS_C_EMPTY_BUFFER ​ GSS_C_GSS_CODE ​ GSS_C_INDEFINITE ​ GSS_C_INITIATE ​ GSS_C_INTEG_FLAG ​ GSS_C_MECH_CODE ​ GSS_C_MUTUAL_FLAG ​ GSS_C_NO_BUFFER ​ GSS_C_NO_CHANNEL_BINDINGS ​ GSS_C_NO_CONTEXT ​ GSS_C_NO_CREDENTIAL ​ GSS_C_NO_NAME ​ GSS_C_NO_OID ​ GSS_C_NO_OID_SET ​ GSS_C_PROT_READY_FLAG ​ GSS_C_QOP_DEFAULT ​ GSS_C_REPLAY_FLAG ​ GSS_C_ROUTINE_ERROR_MASK ​ GSS_C_ROUTINE_ERROR_OFFSET ​ GSS_C_SEQUENCE_FLAG ​ GSS_C_SUPPLEMENTARY_MASK ​ GSS_C_SUPPLEMENTARY_OFFSET ​ GSS_C_TRANS_FLAG ​ GSS_S_BAD_BINDINGS ​ GSS_S_BAD_MECH ​ GSS_S_BAD_NAME ​ GSS_S_BAD_NAMETYPE ​ GSS_S_BAD_QOP ​ GSS_S_BAD_SIG ​ GSS_S_BAD_STATUS ​ GSS_S_CALL_BAD_STRUCTURE ​ GSS_S_CALL_INACCESSIBLE_READ ​ GSS_S_CALL_INACCESSIBLE_WRITE ​ GSS_S_COMPLETE ​ GSS_S_CONTEXT_EXPIRED ​ GSS_S_CONTINUE_NEEDED ​ GSS_S_CREDENTIALS_EXPIRED ​ GSS_S_CRED_UNAVAIL ​ GSS_S_DEFECTIVE_CREDENTIAL ​ GSS_S_DEFECTIVE_TOKEN ​ GSS_S_DUPLICATE_ELEMENT ​ GSS_S_DUPLICATE_TOKEN ​ GSS_S_FAILURE ​ GSS_S_GAP_TOKEN ​ GSS_S_NAME_NOT_MN ​ GSS_S_NO_CONTEXT ​ GSS_S_NO_CRED ​ GSS_S_OLD_TOKEN ​ GSS_S_UNAUTHORIZED ​ GSS_S_UNAVAILABLE ​ GSS_S_UNSEQ_TOKEN
Exportable functions​ $status = indicate_mechs($oidset) Example ​ use GSSAPI qw(:all); ​ ​ my $oidset; ​ my $isin = 0; ​ ​ my $status = indicate_mechs( $oidset ); ​ $status−>major == GSS_S_COMPLETE || die 'error'; ​ ​ $status = $oidset−>contains( gss_mech_krb5_old, $isin ); ​ $status−>major == GSS_S_COMPLETE || die 'error'; ​ ​ if ( $isin ) { ​ print 'Support of Kerberos 5 old mechtype'; ​ } else { ​ print 'No Support of Kerberos 5 old mechtype'; ​ } Constant OIDs provided: ​ # Constant OIDs provided: ​ $oid = gss_nt_user_name; ​ $oid = gss_nt_machine_uid_name; ​ $oid = gss_nt_string_uid_name; ​ $oid = gss_nt_service_name; ​ $oid = gss_nt_exported_name; ​ $oid = gss_nt_service_name_v2; ​ $oid = gss_nt_krb5_name; ​ $oid = gss_nt_krb5_principal; ​ $oid = gss_mech_krb5; ​ $oid = gss_mech_krb5_old; ​ $oid = gss_mech_spnego; All other functions are class or instance methods.
SEE ALSO​GSSAPI::Status (3p) ​GSSAPI::OID (3p) ​GSSAPI::OID::Set (3p) RFC2743 Generic Security Service API Version 2 : C−bindings RFC2744 Generic Security Service Application Program Interface LWP::Authen::Negotiate ​GSSAPI based Authentication plugin for LWP Authen::SASL::Perl::GSSAPI A SASL adapter, implementing the Authen::SASL interface, using GSSAPI.pm http://perlgssapi.sourceforge.net/ Holds an actual list of GSSAPI.pm authentication using modules ​perl (1)
BUGSMore documentation how to use the module has to be added.
SUPPORTSee our project home at <http://perlgssapi.sourceforge.net/> Mailinglist perlgssapi−users@lists.sourceforge.net
AUTHORThe module ist maintained by Achim Grolms <perl@grolmsnet.de> originally written by Philip Guenther <pguen@cpan.org>
THANKS TOPhilip Guenther Leif Johansson Merijn Broeren Harald Joerg Christopher Odenbach Dax Kelson Marc Lehmann David Leonard Florian Ragwitz maintainer of Debian package Markus Moeller Solaris 10 / OpenSolaris support
COPYRIGHTCopyright (c) 2006,2008 Achim Grolms. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. Copyright (c) 2000,2001,2005 Philip Guenther. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. 0
Johanes Gumabo
Data Size   :   31,557 byte
man-GSSAPI.3pmBuild   :   2024-12-05, 20:55   :  
Visitor Screen   :   x
Visitor Counter ( page / site )   :   3 / 168,666
Visitor ID   :     :  
Visitor IP   :   3.145.106.176   :  
Visitor Provider   :   AMAZON-02   :  
Provider Position ( lat x lon )   :   39.962500 x -83.006100   :   x
Provider Accuracy Radius ( km )   :   1000   :  
Provider City   :   Columbus   :  
Provider Province   :   Ohio ,   :   ,
Provider Country   :   United States   :  
Provider Continent   :   North America   :  
Visitor Recorder   :   Version   :  
Visitor Recorder   :   Library   :  
Online Linux Manual Page   :   Version   :   Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page   :   Library   :   lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page   :   Library   :   lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base   :   Version   :   Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base   :   Library   :   lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36
Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .
If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.
ERROR : Need New Coding :         (parse_manual_page_|249|GSSAPI.3pm|36/37|el══─{─══.|.el══─{─══. ds -- \|\(em\| )         (htmlprn|149|GSSAPI.3pm|36/37|.el══─{─══. ds --  —  |.el══─{─══. ds -- \|\(em\| )         (parse_manual_page_|249|GSSAPI.3pm|43|br══─}─══|'br══─}─══ )         (htmlprn|149|GSSAPI.3pm|43|'br══─}─══ |'br══─}─══ )