Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

shishi_realm_for_server_dns(3) [debian man page]

shishi_realm_for_server_dns(3)					      shishi					    shishi_realm_for_server_dns(3)

NAME

       shishi_realm_for_server_dns - API function

SYNOPSIS

       #include <shishi.h>

       char * shishi_realm_for_server_dns(Shishi * handle, char * server);

ARGUMENTS

       Shishi * handle
		   Shishi library handle create by shishi_init().

       char * server
		   hostname to find realm for.

DESCRIPTION

       Find  realm  for a host using DNS lookups, according to draft-ietf-krb-wg-krb-dns-locate-03.txt.  Since DNS lookups may be spoofed, relying
       on the realm information may result in a redirection attack.  In a single-realm scenario, this only achieves a denial of service, but  with
       cross-realm  trust  it  may redirect you to a compromised realm.  For this reason, Shishi prints a warning, suggesting that the user should
       add the proper 'server-realm' configuration tokens instead.

       To illustrate the DNS information used, here is an extract from a zone file for the domain ASDF.COM:

       _kerberos.asdf.com.	       IN      TXT	"ASDF.COM"  _kerberos.mrkserver.asdf.com.    IN       TXT      "MARKETING.ASDF.COM"  _ker-
       beros.salesserver.asdf.com. IN	   TXT	   "SALES.ASDF.COM"

       Let us suppose that in this case, a client wishes to use a service on the host foo.asdf.com.  It would first query:

       _kerberos.foo.asdf.com. IN TXT

       Finding no match, it would then query:

       _kerberos.asdf.com. IN TXT

RETURN VALUE

       Returns realm for host, or NULL if not found.

REPORTING BUGS

       Report bugs to <bug-shishi@gnu.org>.

COPYRIGHT

       Copyright (C) 2002-2010 Simon Josefsson.
       Copying	and  distribution  of  this file, with or without modification, are permitted in any medium without royalty provided the copyright
       notice and this notice are preserved.

SEE ALSO

       The full documentation for shishi is maintained as a Texinfo manual.  If the info and shishi programs are properly installed at your  site,
       the command

	      info shishi

       should give you access to the complete manual.

shishi								       1.0.1					    shishi_realm_for_server_dns(3)

Check Out this Related Man Page

shishi_principal_name_realm(3)					      shishi					    shishi_principal_name_realm(3)

NAME

       shishi_principal_name_realm - API function

SYNOPSIS

       #include <shishi.h>

       int  shishi_principal_name_realm(Shishi	* handle, Shishi_asn1 namenode, const char * namefield, Shishi_asn1 realmnode, const char * realm-
       field, char ** out, size_t * outlen);

ARGUMENTS

       Shishi * handle
		   Shishi library handle create by shishi_init().

       Shishi_asn1 namenode
		   ASN.1 structure with principal name in namefield.

       const char * namefield
		   name of field in namenode containing principal name.

       Shishi_asn1 realmnode
		   ASN.1 structure with principal realm in realmfield.

       const char * realmfield
		   name of field in realmnode containing principal realm.

       char ** out pointer to newly allocated zero terminated string containing principal name.  May be NULL (to only populate outlen).

       size_t * outlen
		   pointer to length of out on output, excluding terminating zero.  May be NULL (to only populate out).

DESCRIPTION

       Represent principal name and realm in ASN.1 structure as zero-terminated string.  The string is allocate by this function, and  it  is  the
       responsibility of the caller to deallocate it.  Note that the output length outlen does not include the terminating zero.

RETURN VALUE

       Returns SHISHI_OK iff successful.

REPORTING BUGS

       Report bugs to <bug-shishi@gnu.org>.

COPYRIGHT

       Copyright (C) 2002-2010 Simon Josefsson.
       Copying	and  distribution  of  this file, with or without modification, are permitted in any medium without royalty provided the copyright
       notice and this notice are preserved.

SEE ALSO

       The full documentation for shishi is maintained as a Texinfo manual.  If the info and shishi programs are properly installed at your  site,
       the command

	      info shishi

       should give you access to the complete manual.

shishi								       1.0.1					    shishi_principal_name_realm(3)
Man Page