libkrb5

- MIT Kerberos 5 library

Synopsis

cc -I/usr/include/kerberosv5 [ flag... ] file... -lkrb5 [ library...]
#include <krb5.h>
#include <com_err.h>

Description

The functions in this library are the routines that comprise the MIT Kerberos 5 library.

INTERFACES

The shared object libkrb5.so provides the public interface defined below.

The krb5 library is provided as a convenience to allow native krb5 applications to be built and to run. Compatability between Solaris releases of the krb5 interface is not guaranteed. For new applications that require these features, libgss(3LIB) is recomended.

For detailed documentation on the krb5 interface, see the MIT Kerberos 5 web site at http://web.mit.edu/kerberos.

The krb5_cc_gen_new routine, listed in krb5.h section, is flawed and should be avoided. Until a new routine is available from MIT, the following can be done:

char ccname[40];
int tmpfd;

snprintf(ccname,sizeof(ccname),"FILE:/tmp/krb5cc_%d_XXXXXX",
        geteuid());

if ((tmpfd = mkstemp(ccname+strlen("FILE:")))==-1) {
        log("mkstemp(): %.100s", strerror(errno));
        problem = errno;
        goto fail;
}
if (fchmod(tmpfd,S_IRUSR | S_IWUSR) == -1) {
        log("fchmod(): %.100s", strerror(errno));
        close(tmpfd);
        problem = errno;
        goto fail;
}
 close(tmpfd);
problem = krb5_cc_resolve(authctxt->krb5_ctx, ccname, &ccache);
...
fail:

The krb5_string_to_key and krb5_string_to_key routines, listed in <krb5.h> section, are part of the old cryptosystem and should not be used in new applications.

<com_err.h>

<krb5.h>

Files

/usr/lib/libkrb5.so.1

shared object

/usr/lib/64/libkrb5.so.1

64-bit shared object

Attributes

See attributes(5) for descriptions of the following attributes:

See Also

krb5-config(1), libgss(3LIB), attributes(5)