Go to main content

man pages section 3: Library Interfaces and Headers

Exit Print View

Updated: Wednesday, July 27, 2022
 
 

libkrb5 (3lib)

Name

libkrb5 - MIT Kerberos 5 library

Synopsis

cc -I/usr/include/kerberosv5 [ flag... ] file... -lkrb5 [ library...]
#include <krb5.h>
#include <com_err.h>

Description

libkrb5(3lib)                 Interface Libraries                libkrb5(3lib)



NAME
       libkrb5 - MIT Kerberos 5 library

SYNOPSIS
       cc -I/usr/include/kerberosv5 [ flag... ] file... -lkrb5 [ library...]
       #include <krb5.h>
       #include <com_err.h>


DESCRIPTION
       The  functions  in  this library are the routines that comprise the MIT
       Kerberos 5 library.

INTERFACES
       The shared object libkrb5.so  provides  the  public  interface  defined
       below.


       The  krb5  library  is  provided  as a convenience to allow native krb5
       applications to be built and  to  run.  Compatibility  between  Solaris
       releases  of the krb5 interface is not guaranteed. For new applications
       that require these features, libgss(3LIB) is recommended.


       For detailed documentation on the krb5 interface, see the MIT  Kerberos
       5 web site at http://web.mit.edu/kerberos.


       The  krb5_cc_gen_new  routine,  listed in krb5.h section, is flawed and
       should be avoided. Until a new routine is available from MIT, the  fol-
       lowing can be done:

         char ccname[40];
         int tmpfd;

         snprintf(ccname,sizeof(ccname),"FILE:/tmp/volatile-user/<uid>/krb5cc_%d_XXXXXX",
                 geteuid(), geteuid());

         if ((tmpfd = mkstemp(ccname+strlen("FILE:")))==-1) {
                 log("mkstemp(): %.100s", strerror(errno));
                 problem = errno;
                 goto fail;
         }
         if (fchmod(tmpfd,S_IRUSR | S_IWUSR) == -1) {
                 log("fchmod(): %.100s", strerror(errno));
                 close(tmpfd);
                 problem = errno;
                 goto fail;
         }
          close(tmpfd);
         problem = krb5_cc_resolve(authctxt->krb5_ctx, ccname, &ccache);
         ...
         fail:



       The  krb5_string_to_key  and  krb5_string_to_key  routines,  listed  in
       <krb5.h> section, are part of the old cryptosystem and  should  not  be
       used in new applications.

   <com_err.h>
         com_err
         com_err_va
         error_message

   <krb5.h>
         krb5_address_compare
         krb5_address_order
         krb5_address_search
         krb5_allow_weak_crypto
         krb5_aname_to_localname
         krb5_appdefault_boolean
         krb5_appdefault_string
         krb5_anonymous_principal
         krb5_anonymous_realm
         krb5_auth_con_free
         krb5_auth_con_genaddrs
         krb5_auth_con_get_checksum_func
         krb5_auth_con_getaddrs
         krb5_auth_con_getauthenticator
         krb5_auth_con_getflags
         krb5_auth_con_getkey
         krb5_auth_con_getlocalseqnumber
         krb5_auth_con_getrcache
         krb5_auth_con_getrecvsubkey
         krb5_auth_con_getremoteseqnumber
         krb5_auth_con_getsendsubkey
         krb5_auth_con_init
         krb5_auth_con_set_checksum_func
         krb5_auth_con_setaddrs
         krb5_auth_con_setflags
         krb5_auth_con_setports
         krb5_auth_con_setrcache
         krb5_auth_con_setrecvsubkey
         krb5_auth_con_setsendsubkey
         krb5_auth_con_setuseruserkey
         krb5_build_principal
         krb5_build_principal_ext
         krb5_c_block_size
         krb5_c_checksum_length
         krb5_c_decrypt
         krb5_c_encrypt
         krb5_c_encrypt_length
         krb5_c_enctype_compare
         krb5_c_free_state
         krb5_c_init_state
         krb5_c_is_coll_proof_cksum
         krb5_c_is_keyed_cksum
         krb5_c_keyed_checksum_types
         krb5_c_make_checksum
         krb5_c_make_random_key
         krb5_c_random_make_octets
         krb5_c_string_to_key
         krb5_c_string_to_key_with_params
         krb5_c_valid_cksumtype
         krb5_c_valid_enctype
         krb5_c_verify_checksum
         krb5_cc_close
         krb5_cc_copy_creds
         krb5_cc_default
         krb5_cc_default_name
         krb5_cc_destroy
         krb5_cc_end_seq_get
         krb5_cc_gen_new
         krb5_cc_get_config
         krb5_cc_get_name
         krb5_cc_get_principal
         krb5_cc_get_type
         krb5_cc_initialize
         krb5_cc_next_cred
         krb5_cc_remove_cred
         krb5_cc_resolve
         krb5_cc_retrieve_cred
         krb5_cc_set_config
         krb5_cc_set_default_name
         krb5_cc_set_flags
         krb5_cc_start_seq_get
         krb5_cc_store_cred
         krb5_change_password
         krb5_cksumtype_to_string
         krb5_copy_addresses
         krb5_copy_authdata
         krb5_copy_authenticator
         krb5_copy_checksum
         krb5_copy_creds
         krb5_copy_data
         krb5_copy_keyblock
         krb5_copy_keyblock_contents
         krb5_copy_principal
         krb5_copy_ticket
         krb5_decode_authdata_container
         krb5_decode_ticket
         krb5_deltat_to_string
         krb5_encode_authdata_container
         krb5_enctype_to_string
         krb5_free_addresses
         krb5_free_ap_rep_enc_part
         krb5_free_authdata
         krb5_free_authenticator
         krb5_free_checksum
         krb5_free_checksum_contents
         krb5_free_cksumtypes
         krb5_free_context
         krb5_free_cred_contents
         krb5_free_creds
         krb5_free_data
         krb5_free_data_contents
         krb5_free_default_realm
         krb5_free_error
         krb5_free_host_realm
         krb5_free_keyblock
         krb5_free_keyblock_contents
         krb5_free_keytab_entry_contents
         krb5_free_principal
         krb5_free_realm_string
         krb5_free_tgt_creds
         krb5_free_ticket
         krb5_free_unparsed_name
         krb5_fwd_tgt_creds
         krb5_get_credentials
         krb5_get_credentials_renew
         krb5_get_credentials_validate
         krb5_get_default_realm
         krb5_get_error_message
         krb5_get_host_realm
         krb5_get_init_creds_keytab
         krb5_get_init_creds_opt_get_fast_flags
         krb5_get_init_creds_opt_init
         krb5_get_init_creds_opt_set_address_list
         krb5_get_init_creds_opt_set_anonymous
         krb5_get_init_creds_opt_set_etype_list
         krb5_get_init_creds_opt_set_fast_ccache_name
         krb5_get_init_creds_opt_set_fast_flags
         krb5_get_init_creds_opt_set_forwardable
         krb5_get_init_creds_opt_set_out_ccache
         krb5_get_init_creds_opt_set_preauth_list
         krb5_get_init_creds_opt_set_proxiable
         krb5_get_init_creds_opt_set_renew_life
         krb5_get_init_creds_opt_set_salt
         krb5_get_init_creds_opt_set_tkt_life
         krb5_get_key_data
         krb5_get_key_enctype
         krb5_get_key_length
         krb5_get_init_creds_password
         krb5_get_permitted_enctypes
         krb5_get_profile
         krb5_get_prompt_types
         krb5_get_renewed_creds
         krb5_get_server_rcache
         krb5_get_validated_creds
         krb5_init_allocated_keyblock
         krb5_init_context
         krb5_init_keyblock
         krb5_init_secure_context
         krb5_is_config_principal
         krb5_is_thread_safe
         krb5_kt_add_entry
         krb5_kt_close
         krb5_kt_default
         krb5_kt_default_name
         krb5_kt_end_seq_get
         krb5_kt_get_entry
         krb5_kt_get_name
         krb5_kt_get_type
         krb5_kt_next_entry
         krb5_kt_read_service_key
         krb5_kt_remove_entry
         krb5_kt_resolve
         krb5_kt_start_seq_get
         krb5_kuserok
          krb5_make_authdata_kdc_issued
         krb5_mk_error
         krb5_mk_ncred
         krb5_mk_priv
         krb5_mk_rep
         krb5_mk_req
         krb5_mk_req_extended
         krb5_mk_safe
         krb5_mk_1cred
         krb5_os_localaddr
         krb5_pac_add_buffer
         krb5_pac_free
         krb5_pac_get_types
         krb5_pac_get_buffer
         krb5_pac_init
         krb5_pac_parse
         krb5_pac_verify
         krb5_parse_name
         krb5_principal_compare
         krb5_principal2salt
         krb5_prompter_posix
         krb5_rd_cred
         krb5_rd_error
         krb5_rd_priv
         krb5_rd_rep
         krb5_rd_req
         krb5_rd_safe
         krb5_read_password
         krb5_realm_compare
         krb5_realm_iterator
         krb5_realm_iterator_create
         krb5_realm_iterator_free
         krb5_recvauth
         krb5_recvauth_version
         krb5_salttype_to_string
         krb5_sendauth
         krb5_set_default_realm
         krb5_set_default_tgs_enctypes
         krb5_set_key_data
         krb5_set_key_enctype
         krb5_set_key_length
         krb5_set_password
         krb5_set_password_using_ccache
         krb5_set_principal_realm
         krb5_set_real_time
         krb5_sname_to_principal
         krb5_string_to_cksumtype
         krb5_string_to_deltat
         krb5_string_to_enctype
         krb5_string_to_key
         krb5_string_to_salttype
         krb5_string_to_timestamp
         krb5_timeofday
         krb5_timestamp_to_sfstring
         krb5_timestamp_to_string
         krb5_unparse_name
         krb5_unparse_name_ext
         krb5_us_timeofday
         krb5_use_enctype
         krb5_verify_authdata_kdc_issued
         krb5_verify_init_creds
         krb5_verify_init_creds_opt_init
         krb5_verify_init_creds_opt_set_ap_req_nofail
         krb5_xfree
         krb5_xfree_wrap

FILES
       /usr/lib/libkrb5.so.1       shared object


       /usr/lib/64/libkrb5.so.1    64-bit shared object



ATTRIBUTES
       See attributes(7) for descriptions of the following attributes:


       +---------------+--------------------------+
       |ATTRIBUTE TYPE |     ATTRIBUTE VALUE      |
       +---------------+--------------------------+
       |Availability   | security/kerberos-5      |
       +---------------+--------------------------+
       |Stability      | Pass-through uncommitted |
       +---------------+--------------------------+

SEE ALSO
       krb5-config(1), libgss(3LIB), attributes(7)



NOTES
       Source  code  for open source software components in Oracle Solaris can
       be found at https://www.oracle.com/downloads/opensource/solaris-source-
       code-downloads.html.

       This     software     was    built    from    source    available    at
       https://github.com/oracle/solaris-userland.   The  original   community
       source      was      downloaded      from       http://web.mit.edu/ker-
       beros/dist/krb5/1.18/krb5-1.18.4.tar.gz.

       Further information about this software can be found on the open source
       community website at http://web.mit.edu/kerberos/.



Solaris 11.4                      22 Dec 2020                    libkrb5(3lib)