aboutsummaryrefslogtreecommitdiff
path: root/lib/krb5/krb524_convert_creds_kdc.cat3
blob: 84d48c34489fa543e5441bed8d6e2c4e09e90849 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

KRB524_CONVERT_CREDS_... BSD Library Functions Manual KRB524_CONVERT_CREDS_...

NNAAMMEE
     kkrrbb552244__ccoonnvveerrtt__ccrreeddss__kkddcc, kkrrbb552244__ccoonnvveerrtt__ccrreeddss__kkddcc__ccccaacchhee -- converts
     Kerberos 5 credentials to Kerberos 4 credentials

LLIIBBRRAARRYY
     Kerberos 5 Library (libkrb5, -lkrb5)

SSYYNNOOPPSSIISS
     ##iinncclluuddee <<kkrrbb55..hh>>

     _k_r_b_5___e_r_r_o_r___c_o_d_e
     kkrrbb552244__ccoonnvveerrtt__ccrreeddss__kkddcc(_k_r_b_5___c_o_n_t_e_x_t _c_o_n_t_e_x_t, _k_r_b_5___c_r_e_d_s _*_i_n___c_r_e_d,
         _s_t_r_u_c_t _c_r_e_d_e_n_t_i_a_l_s _*_v_4_c_r_e_d_s);

     _k_r_b_5___e_r_r_o_r___c_o_d_e
     kkrrbb552244__ccoonnvveerrtt__ccrreeddss__kkddcc__ccccaacchhee(_k_r_b_5___c_o_n_t_e_x_t _c_o_n_t_e_x_t, _k_r_b_5___c_c_a_c_h_e _c_c_a_c_h_e,
         _k_r_b_5___c_r_e_d_s _*_i_n___c_r_e_d, _s_t_r_u_c_t _c_r_e_d_e_n_t_i_a_l_s _*_v_4_c_r_e_d_s);

DDEESSCCRRIIPPTTIIOONN
     Convert the Kerberos 5 credential to Kerberos 4 credential.  This is done
     by sending them to the 524 service in the KDC.

     kkrrbb552244__ccoonnvveerrtt__ccrreeddss__kkddcc() converts the Kerberos 5 credential in _i_n___c_r_e_d
     to Kerberos 4 credential that is stored in _c_r_e_d_e_n_t_i_a_l_s.

     kkrrbb552244__ccoonnvveerrtt__ccrreeddss__kkddcc__ccccaacchhee() is different from
     kkrrbb552244__ccoonnvveerrtt__ccrreeddss__kkddcc() in that way that if _i_n___c_r_e_d doesn't contain a
     DES session key, then a new one is fetched from the KDC and stored in the
     cred cache _c_c_a_c_h_e, and then the KDC is queried to convert the credential.

     This interfaces are used to make the migration to Kerberos 5 from Ker-
     beros 4 easier.  There are few services that still need Kerberos 4, and
     this is mainly for compatibility for those services.  Some services, like
     AFS, really have Kerberos 5 supports, but still uses the 524 interface to
     make the migration easier.

SSEEEE AALLSSOO
     krb5(3), krb5.conf(5)

HEIMDAL                         March 20, 2004                         HEIMDAL