man krb5_get_cred_from_kdc_opt (Fonctions bibliothèques) - krb5_get_credentials ,

NAME

krb5_get_credentials ,krb5_get_credentials_with_flags ,krb5_get_cred_from_kdc ,krb5_get_cred_from_kdc_opt ,krb5_get_kdc_cred - get credentials from the KDC using krbtgt

LIBRARY

Kerberos 5 Library (libkrb5, -lkrb5)

SYNOPSIS

krb5_context contextkrb5_flags optionskrb5_ccache ccachekrb5_creds *in_credskrb5_creds **out_credskrb5_context contextkrb5_flags optionskrb5_kdc_flags flagskrb5_ccache ccachekrb5_creds *in_credskrb5_creds **out_credskrb5_context contextkrb5_ccache ccachekrb5_creds *in_credskrb5_creds **out_credskrb5_creds ***ret_tgtskrb5_context contextkrb5_ccache ccachekrb5_creds *in_credskrb5_creds **out_credskrb5_creds ***ret_tgtskrb5_flags flagskrb5_context contextkrb5_ccache idkrb5_kdc_flags flagskrb5_addresses *addressesTicket *second_ticketkrb5_creds *in_credskrb5_creds **out_creds

DESCRIPTION

krb5_get_credentials_with_flags

get credentials by first looking in the ccache and if doesn't exists or is expired, fetch the credential from the KDC using the krbtgt in ccache . Valid flags to pass into options argument are:

KRB5_GC_CACHED
Only check the ccache , don't got out on network to fetch credential.
KRB5_GC_USER_USER
request a user to user ticket. This options doesn't store the resulting user to user credential in the ccache .
KRB5_GC_EXPIRED_OK
returns the credential even if its expired, default behavior is trying to refetch the credential from the KDC.

Flags are KDCOptions, note the caller must fill in the bit-field and not use the integer associated structure.

krb5_get_credentials works the same way as krb5_get_credentials_with_flags except that the flags field is missing.

krb5_get_cred_from_kdc and krb5_get_cred_from_kdc_opt fetches the credential from the KDC very much like krb5_get_credentials, but doesn't look in the ccache if the credential exists there first.

krb5_get_kdc_cred does the same as the functions above, but the caller must fill in all the information andits closer to the wire protocol.

SEE ALSO

krb5(3) ,krb5_get_forwarded_creds(3) ,krb5.conf()