Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

shishi_tkt_transited_policy_checked_p(3) [debian man page]

shishi_tkt_transited_policy_checked_p(3)			      shishi				  shishi_tkt_transited_policy_checked_p(3)

NAME

       shishi_tkt_transited_policy_checked_p - API function

SYNOPSIS

       #include <shishi.h>

       int shishi_tkt_transited_policy_checked_p(Shishi_tkt * tkt);

ARGUMENTS

       Shishi_tkt * tkt
		   input variable with ticket info.

DESCRIPTION

       Determine if ticket has been policy checked for transit.

       The application server is ultimately responsible for accepting or rejecting authentication and SHOULD check that only suitably trusted KDCs
       are relied upon to authenticate a principal.  The transited field in the ticket identifies which realms (and thus which KDCs) were involved
       in  the authentication process and an application server would normally check this field. If any of these are untrusted to authenticate the
       indicated client principal (probably determined by a realm-based policy), the authentication attempt MUST  be  rejected.  The  presence	of
       trusted KDCs in this list does not provide any guarantee; an untrusted KDC may have fabricated the list.

       While the end server ultimately decides whether authentication is valid, the KDC for the end server's realm MAY apply a realm specific pol-
       icy for validating the transited field and accepting credentials for cross-realm authentication. When  the  KDC	applies  such  checks  and
       accepts	such  cross-realm  authentication  it  will  set  the  TRANSITED-POLICY-CHECKED flag in the service tickets it issues based on the
       cross-realm TGT. A client MAY request that the KDCs not check the transited field by setting the  DISABLE-TRANSITED-CHECK  flag.  KDCs  are
       encouraged but not required to honor this flag.

       Application  servers  MUST either do the transited-realm checks themselves, or reject cross-realm tickets without TRANSITED-POLICY- CHECKED
       set.

RETURN VALUE

       Returns non-0 iff transited-policy-checked flag is set in ticket.

REPORTING BUGS

       Report bugs to <bug-shishi@gnu.org>.

COPYRIGHT

       Copyright (C) 2002-2010 Simon Josefsson.
       Copying and distribution of this file, with or without modification, are permitted in any medium without  royalty  provided  the  copyright
       notice and this notice are preserved.

SEE ALSO

       The  full documentation for shishi is maintained as a Texinfo manual.  If the info and shishi programs are properly installed at your site,
       the command

	      info shishi

       should give you access to the complete manual.

shishi								       1.0.1				  shishi_tkt_transited_policy_checked_p(3)

Check Out this Related Man Page

shisa_principal_update(3)					      shishi						 shisa_principal_update(3)

NAME

       shisa_principal_update - API function

SYNOPSIS

       #include <shisa.h>

       int shisa_principal_update(Shisa * dbh, const char * realm, const char * principal, const Shisa_principal * ph);

ARGUMENTS

       Shisa * dbh Shisa library handle created by shisa().

       const char * realm
		   Name of realm the principal belongs in.

       const char * principal
		   Name of principal to get information on.

       const Shisa_principal * ph
		   Pointer to principal structure with information to store in database.

DESCRIPTION

       Modify  information  stored  for  given PRINCIPALREALM.	Note that it is usually a good idea to only set the fields in ph that you actually
       want to update.	Specifically, first calling shisa_principal_find() to get the current information, then modifying one field,  and  calling
       shisa_principal_update()  is  not  recommended in general, as this will 1) overwrite any modifications made to other fields between the two
       calls (by other processes) and 2) will cause all values to be written again, which may generate more overhead.

RETURN VALUE

       Returns SHISA_OK if successful, SHISA_NO_REALM if the indicated realm does not exist, SHISA_NO_PRINCIPAL if the	indicated  principal  does
       not exist, or an error code.

REPORTING BUGS

       Report bugs to <bug-shishi@gnu.org>.

COPYRIGHT

       Copyright (C) 2002-2010 Simon Josefsson.
       Copying	and  distribution  of  this file, with or without modification, are permitted in any medium without royalty provided the copyright
       notice and this notice are preserved.

SEE ALSO

       The full documentation for shishi is maintained as a Texinfo manual.  If the info and shishi programs are properly installed at your  site,
       the command

	      info shishi

       should give you access to the complete manual.

shishi								       1.0.1						 shisa_principal_update(3)
Man Page