1sasl_authorizSei_mtp(l3eSAASuLt)hentication Security Layer LibrarysaFsuln_catuitohnosrize_t(3SASL)
2
3
4

NAME

6       sasl_authorize_t - the SASL authorization callback
7

SYNOPSIS

9       cc [ flag ... ] file ... -lsasl   [ library ... ]
10       #include <sasl/sasl.h>
11
12       int sasl_authorize_t(sasl_conn_t *conn, const char *requested_user,
13            unsigned alen, const char* auth_identity, unsigned rlen,
14            const char *def_realm, unsigned urlen, struct propctx *propctx);
15
16

DESCRIPTION

18       sasl_authorize_t()  is  a  typedef  function prototype that defines the
19       interface associated with the SASL_CB_PROXY_POLICY callback.
20
21
22       Use the sasl_authorize_t() interface to check  whether  the  authorized
23       user auth_identity can act as the user requested_user. For example, the
24       user root may want to authenticate with root's credentials but  as  the
25       user tmartin, with all of tmartin's rights, not root's. A server appli‐
26       cation should be very careful when it determines which users may  proxy
27       as other users.
28

PARAMETERS

30       conn              The SASL connection context.
31
32
33       requested_user    The identity or username to authorize. requested_user
34                         is null-terminated.
35
36
37       rlen              The length of requested_user.
38
39
40       auth_identity     The identity associated with the  secret.  auth_iden‐
41                         tity is null-terminated.
42
43
44       alen              The length of auth_identity.
45
46
47       default_realm     The    default    user    realm    as    passed    to
48                         sasl_server_new(3SASL).
49
50
51       ulren             The length of the default realm
52
53
54       propctx           Auxiliary properties
55
56

RETURN VALUES

58       Like other SASL callback functions, sasl_authorize_t() returns an inte‐
59       ger  that corresponds to a SASL error code. See <sasl.h> for a complete
60       list of SASL error codes.
61

ERRORS

63       SASL_OK    The call to sasl_authorize_t() was successful.
64
65
66
67       See sasl_errors(3SASL) for information on SASL error codes.
68

ATTRIBUTES

70       See attributes(5) for descriptions of the following attributes:
71
72
73
74
75       ┌─────────────────────────────┬─────────────────────────────┐
76       │      ATTRIBUTE TYPE         │      ATTRIBUTE VALUE        │
77       ├─────────────────────────────┼─────────────────────────────┤
78       │Availability                 │SUNWlibsasl                  │
79       ├─────────────────────────────┼─────────────────────────────┤
80       │Interface Stability          │Evolving                     │
81       ├─────────────────────────────┼─────────────────────────────┤
82       │MT-Level                     │MT-Safe                      │
83       └─────────────────────────────┴─────────────────────────────┘
84

SEE ALSO

86       sasl_errors(3SASL), sasl_server_new(3SASL), attributes(5)
87
88
89
90SunOS 5.11                        27 Oct 2003          sasl_authorize_t(3SASL)
Impressum