Go to main content

man pages section 3: Library Interfaces and Headers

Exit Print View

Updated: July 2017
 
 

libkrb5(3LIB)

Name

libkrb5 - MIT Kerberos 5 library

Synopsis

cc –I/usr/include/kerberosv5 [ flag... ] file... –lkrb5 [ library...]
#include <krb5.h>
#include <com_err.h>

Description

The functions in this library are the routines that comprise the MIT Kerberos 5 library.

INTERFACES

The shared object libkrb5.so provides the public interface defined below.

The krb5 library is provided as a convenience to allow native krb5 applications to be built and to run. Compatability between Solaris releases of the krb5 interface is not guaranteed. For new applications that require these features, libgss(3LIB) is recomended.

For detailed documentation on the krb5 interface, see the MIT Kerberos 5 web site at http://web.mit.edu/kerberos.

The krb5_cc_gen_new routine, listed in krb5.h section, is flawed and should be avoided. Until a new routine is available from MIT, the following can be done:

char ccname[40];
int tmpfd;

snprintf(ccname,sizeof(ccname),"FILE:/tmp/krb5cc_%d_XXXXXX",
        geteuid());

if ((tmpfd = mkstemp(ccname+strlen("FILE:")))==-1) {
        log("mkstemp(): %.100s", strerror(errno));
        problem = errno;
        goto fail;
}
if (fchmod(tmpfd,S_IRUSR | S_IWUSR) == -1) {
        log("fchmod(): %.100s", strerror(errno));
        close(tmpfd);
        problem = errno;
        goto fail;
}
 close(tmpfd);
problem = krb5_cc_resolve(authctxt->krb5_ctx, ccname, &ccache);
...
fail:

The krb5_string_to_key and krb5_string_to_key routines, listed in krb5.h section, are part of the old cryptosystem and should not be used in new applications.

com_err.h

  • com_err
  • com_err_va
  • error_message

krb5.h

  • krb5_address_compare
  • krb5_address_order
  • krb5_address_search
  • krb5_allow_weak_crypto
  • krb5_aname_to_localname
  • krb5_appdefault_boolean
  • krb5_appdefault_string
  • krb5_anonymous_principal
  • krb5_anonymous_realm
  • krb5_auth_con_free
  • krb5_auth_con_genaddrs
  • krb5_auth_con_get_checksum_func
  • krb5_auth_con_getaddrs
  • krb5_auth_con_getauthenticator
  • krb5_auth_con_getflags
  • krb5_auth_con_getkey
  • krb5_auth_con_getlocalseqnumber
  • krb5_auth_con_getrcache
  • krb5_auth_con_getrecvsubkey
  • krb5_auth_con_getremoteseqnumber
  • krb5_auth_con_getsendsubkey
  • krb5_auth_con_init
  • krb5_auth_con_set_checksum_func
  • krb5_auth_con_setaddrs
  • krb5_auth_con_setflags
  • krb5_auth_con_setports
  • krb5_auth_con_setrcache
  • krb5_auth_con_setrecvsubkey
  • krb5_auth_con_setsendsubkey
  • krb5_auth_con_setuseruserkey
  • krb5_build_principal
  • krb5_build_principal_ext
  • krb5_c_block_size
  • krb5_c_checksum_length
  • krb5_c_decrypt
  • krb5_c_encrypt
  • krb5_c_encrypt_length
  • krb5_c_enctype_compare
  • krb5_c_free_state
  • krb5_c_init_state
  • krb5_c_is_coll_proof_cksum
  • krb5_c_is_keyed_cksum
  • krb5_c_keyed_checksum_types
  • krb5_c_make_checksum
  • krb5_c_make_random_key
  • krb5_c_random_make_octets
  • krb5_c_string_to_key
  • krb5_c_string_to_key_with_params
  • krb5_c_valid_cksumtype
  • krb5_c_valid_enctype
  • krb5_c_verify_checksum
  • krb5_cc_close
  • krb5_cc_copy_creds
  • krb5_cc_default
  • krb5_cc_default_name
  • krb5_cc_destroy
  • krb5_cc_end_seq_get
  • krb5_cc_gen_new
  • krb5_cc_get_config
  • krb5_cc_get_name
  • krb5_cc_get_principal
  • krb5_cc_get_type
  • krb5_cc_initialize
  • krb5_cc_next_cred
  • krb5_cc_remove_cred
  • krb5_cc_resolve
  • krb5_cc_retrieve_cred
  • krb5_cc_set_config
  • krb5_cc_set_default_name
  • krb5_cc_set_flags
  • krb5_cc_start_seq_get
  • krb5_cc_store_cred
  • krb5_change_password
  • krb5_cksumtype_to_string
  • krb5_copy_addresses
  • krb5_copy_authdata
  • krb5_copy_authenticator
  • krb5_copy_checksum
  • krb5_copy_creds
  • krb5_copy_data
  • krb5_copy_keyblock
  • krb5_copy_keyblock_contents
  • krb5_copy_principal
  • krb5_copy_ticket
  • krb5_decode_authdata_container
  • krb5_decode_ticket
  • krb5_deltat_to_string
  • krb5_encode_authdata_container
  • krb5_enctype_to_string
  • krb5_free_addresses
  • krb5_free_ap_rep_enc_part
  • krb5_free_authdata
  • krb5_free_authenticator
  • krb5_free_checksum
  • krb5_free_checksum_contents
  • krb5_free_cksumtypes
  • krb5_free_context
  • krb5_free_cred_contents
  • krb5_free_creds
  • krb5_free_data
  • krb5_free_data_contents
  • krb5_free_default_realm
  • krb5_free_error
  • krb5_free_host_realm
  • krb5_free_keyblock
  • krb5_free_keyblock_contents
  • krb5_free_keytab_entry_contents
  • krb5_free_principal
  • krb5_free_realm_string
  • krb5_free_tgt_creds
  • krb5_free_ticket
  • krb5_free_unparsed_name
  • krb5_fwd_tgt_creds
  • krb5_get_credentials
  • krb5_get_credentials_renew
  • krb5_get_credentials_validate
  • krb5_get_default_realm
  • krb5_get_error_message
  • krb5_get_host_realm
  • krb5_get_init_creds_keytab
  • krb5_get_init_creds_opt_get_fast_flags
  • krb5_get_init_creds_opt_init
  • krb5_get_init_creds_opt_set_address_list
  • krb5_get_init_creds_opt_set_anonymous
  • krb5_get_init_creds_opt_set_etype_list
  • krb5_get_init_creds_opt_set_fast_ccache_name
  • krb5_get_init_creds_opt_set_fast_flags
  • krb5_get_init_creds_opt_set_forwardable
  • krb5_get_init_creds_opt_set_out_ccache
  • krb5_get_init_creds_opt_set_preauth_list
  • krb5_get_init_creds_opt_set_proxiable
  • krb5_get_init_creds_opt_set_renew_life
  • krb5_get_init_creds_opt_set_salt
  • krb5_get_init_creds_opt_set_tkt_life
  • krb5_get_key_data
  • krb5_get_key_enctype
  • krb5_get_key_length
  • krb5_get_init_creds_password
  • krb5_get_permitted_enctypes
  • krb5_get_profile
  • krb5_get_prompt_types
  • krb5_get_renewed_creds
  • krb5_get_server_rcache
  • krb5_get_validated_creds
  • krb5_init_allocated_keyblock
  • krb5_init_context
  • krb5_init_keyblock
  • krb5_init_secure_context
  • krb5_is_config_principal
  • krb5_is_thread_safe
  • krb5_kt_add_entry
  • krb5_kt_close
  • krb5_kt_default
  • krb5_kt_default_name
  • krb5_kt_end_seq_get
  • krb5_kt_get_entry
  • krb5_kt_get_name
  • krb5_kt_get_type
  • krb5_kt_next_entry
  • krb5_kt_read_service_key
  • krb5_kt_remove_entry
  • krb5_kt_resolve
  • krb5_kt_start_seq_get
  • krb5_kuserok
  • krb5_make_authdata_kdc_issued
  • krb5_mk_error
  • krb5_mk_ncred
  • krb5_mk_priv
  • krb5_mk_rep
  • krb5_mk_req
  • krb5_mk_req_extended
  • krb5_mk_safe
  • krb5_mk_1cred
  • krb5_os_localaddr
  • krb5_pac_add_buffer
  • krb5_pac_free
  • krb5_pac_get_types
  • krb5_pac_get_buffer
  • krb5_pac_init
  • krb5_pac_parse
  • krb5_pac_verify
  • krb5_parse_name
  • krb5_principal_compare
  • krb5_principal2salt
  • krb5_prompter_posix
  • krb5_rd_cred
  • krb5_rd_error
  • krb5_rd_priv
  • krb5_rd_rep
  • krb5_rd_req
  • krb5_rd_safe
  • krb5_read_password
  • krb5_realm_compare
  • krb5_realm_iterator
  • krb5_realm_iterator_create
  • krb5_realm_iterator_free
  • krb5_recvauth
  • krb5_recvauth_version
  • krb5_salttype_to_string
  • krb5_sendauth
  • krb5_set_default_realm
  • krb5_set_default_tgs_enctypes
  • krb5_set_key_data
  • krb5_set_key_enctype
  • krb5_set_key_length
  • krb5_set_password
  • krb5_set_password_using_ccache
  • krb5_set_principal_realm
  • krb5_set_real_time
  • krb5_sname_to_principal
  • krb5_string_to_cksumtype
  • krb5_string_to_deltat
  • krb5_string_to_enctype
  • krb5_string_to_key
  • krb5_string_to_salttype
  • krb5_string_to_timestamp
  • krb5_timeofday
  • krb5_timestamp_to_sfstring
  • krb5_timestamp_to_string
  • krb5_unparse_name
  • krb5_unparse_name_ext
  • krb5_us_timeofday
  • krb5_use_enctype
  • krb5_verify_authdata_kdc_issued
  • krb5_verify_init_creds
  • krb5_verify_init_creds_opt_init
  • krb5_verify_init_creds_opt_set_ap_req_nofail
  • krb5_xfree
  • krb5_xfree_wrap

Files

/usr/lib/libkrb5.so.1

shared object

/usr/lib/64/libkrb5.so.1

64-bit shared object

Attributes

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE
ATTRIBUTE VALUE
Availability
service/security/kerberos-5
Interface Stability
Volatile
MT-Level
Safe

See Also

krb5-config(1), libgss(3LIB), attributes(5)