1KRB5_CHECK_TRANSITED(3) BSD Library Functions Manual KRB5_CHECK_TRANSITED(3)
2
4 krb5_check_transited, krb5_check_transited_realms,
5 krb5_domain_x500_decode, krb5_domain_x500_encode — realm transit verifi‐
6 cation and encoding/decoding functions
7
9 Kerberos 5 Library (libkrb5, -lkrb5)
10
12 #include <krb5.h>
13
14 krb5_error_code
15 krb5_check_transited(krb5_context context, krb5_const_realm client_realm,
16 krb5_const_realm server_realm, krb5_realm *realms, int num_realms,
17 int *bad_realm);
18
19 krb5_error_code
20 krb5_check_transited_realms(krb5_context context,
21 const char *const *realms, int num_realms, int *bad_realm);
22
23 krb5_error_code
24 krb5_domain_x500_decode(krb5_context context, krb5_data tr,
25 char ***realms, int *num_realms, const char *client_realm,
26 const char *server_realm);
27
28 krb5_error_code
29 krb5_domain_x500_encode(char **realms, int num_realms,
30 krb5_data *encoding);
31
33 krb5_check_transited() checks the path from client_realm to server_realm
34 where realms and num_realms is the realms between them. If the function
35 returns an error value, bad_realm will be set to the realm in the list
36 causing the error. krb5_check_transited() is used internally by the KDC
37 and libkrb5 and should not be called by client applications.
38
39 krb5_check_transited_realms() is deprecated.
40
41 krb5_domain_x500_encode() and krb5_domain_x500_decode() encodes and
42 decodes the realm names in the X500 format that Kerberos uses to describe
43 the transited realms in krbtgts.
44
46 krb5(3), krb5.conf(5)
47
48HEIMDAL May 1, 2006 HEIMDAL