KRB5_VERIFY_INIT_CREDS - Online Linux Manual PageSection : 3
Updated : May 1, 2006
Operating system : HEIMDAL

NAME krb5_verify_init_creds_opt_init, krb5_verify_init_creds_opt_set_ap_req_nofail, krb5_verify_init_creds verifies a credential cache is correct by using a local keytab

LIBRARYKerberos 5 Library (libkrb5, -lkrb5)

SYNOPSIS #include <krb5.h>
struct krb5_verify_init_creds_opt; void krb5_verify_init_creds_opt_init ( krb5_verify_init_creds_opt *options );
void krb5_verify_init_creds_opt_set_ap_req_nofail ( krb5_verify_init_creds_opt *options , int ap_req_nofail );
krb5_error_code krb5_verify_init_creds ( krb5_context context , krb5_creds *creds , krb5_principal ap_req_server , krb5_ccache *ccache , krb5_verify_init_creds_opt *options );

DESCRIPTIONThe krb5_verify_init_creds function verifies the initial tickets with the local keytab to make sure the response of the KDC was spoof-ed. krb5_verify_init_creds will use principal ap_req_server from the local keytab, if NULL is passed in, the code will guess the local hostname and use that to form host/hostname/GUESSED-REALM-FOR-HOSTNAME. creds is the credential that krb5_verify_init_creds should verify. If ccache is given krb5_verify_init_creds() stores all credentials it fetched from the KDC there, otherwise it will use a memory credential cache that is destroyed when done. krb5_verify_init_creds_opt_init() cleans the the structure, must be used before trying to pass it in to krb5_verify_init_creds(). krb5_verify_init_creds_opt_set_ap_req_nofail() controls controls the behavior if ap_req_server doesn't exists in the local keytab or in the KDC's database, if it's true, the error will be ignored. Note that this use is possible insecure.

SEE ALSOkrb5(3), krb5_get_init_creds(3), krb5_verify_user(3), krb5.conf(5)
0
Johanes Gumabo
Data Size   :   6,583 byte
man-krb5_verify_init_creds_opt_set_ap_req_nofail.3Build   :   2024-12-05, 20:55   :  
Visitor Screen   :   x
Visitor Counter ( page / site )   :   2 / 175,088
Visitor ID   :     :  
Visitor IP   :   3.149.240.101   :  
Visitor Provider   :   AMAZON-02   :  
Provider Position ( lat x lon )   :   39.962500 x -83.006100   :   x
Provider Accuracy Radius ( km )   :   1000   :  
Provider City   :   Columbus   :  
Provider Province   :   Ohio ,   :   ,
Provider Country   :   United States   :  
Provider Continent   :   North America   :  
Visitor Recorder   :   Version   :  
Visitor Recorder   :   Library   :  
Online Linux Manual Page   :   Version   :   Online Linux Manual Page - Fedora.40 - march=x86-64 - mtune=generic - 24.12.05
Online Linux Manual Page   :   Library   :   lib_c - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Online Linux Manual Page   :   Library   :   lib_m - 24.10.03 - march=x86-64 - mtune=generic - Fedora.40
Data Base   :   Version   :   Online Linux Manual Page Database - 24.04.13 - march=x86-64 - mtune=generic - fedora-38
Data Base   :   Library   :   lib_c - 23.02.07 - march=x86-64 - mtune=generic - fedora.36

Very long time ago, I have the best tutor, Wenzel Svojanovsky . If someone knows the email address of Wenzel Svojanovsky , please send an email to johanes_gumabo@yahoo.co.id .
If error, please print screen and send to johanes_gumabo@yahoo.co.id
Under development. Support me via PayPal.