PreviousNext

gss_inquire_cred(3sec)

Provides the calling application information about a credential

Synopsis

#include <dce/gssapi.h>

OM_uint32 gss_inquire_cred (
OM_uint32 *minor_status,
gss_cred_id_t cred_handle,
gss_name_t *
name,
OM_uint32 *
lifetime,
int *
cred_usage,
gss_OID_set *
mechs)

Parameters

Input

cred_handle
Specifies a handle for the target credential. To get information about the default credential, specify GSS_C_NO_CREDENTIAL.

Output

name
Returns the principal name asserted by the credential. If the principal name is not required, specify NULL.

lifetime
Returns the number of seconds for which the credential will remain valid.

If the credential expired, the parameter returns a 0 (zero). If there is no credential expiration, the parameter returns the value GSS_C_INDEFINITE. If an expiration time is not required, specify NULL.

cred_usage
Returns one of the following values describing how the application can use the credential:

· GSS_C_INITIATE

· GSS_C_ACCEPT

· GSS_C_BOTH


If no usage information is required, specify NULL.

mechs
Returns a set of security mechanisms supported by the credential, as follows:

· GSSDCE_C_OID_DCE_KRBV5_DES for DCE Security

· GSS_C_OID_KRBV5_DES for Kerberos

minor_status
Returns a status code from the security mechanism.

Description
The gss_inquire_cred( ) routine provides information about a credential to the calling application. The calling application must first have called the gss_acquire_cred( ) routine for a handle for the credential.

Status Codes
The following describes a partial list of codes (messages) that might be returned. Refer to the OSF DCE Problem Determination Guide for complete descriptions of all messages. The following status codes can be returned:

GSS_S_COMPLETE The routine was completed successfully.
GSS_S_CREDENTIALS_EXPIRED The credentials expired. If the lifetime parameter was passed as NULL, it is set to 0 (zero).
GSS_S_DEFECTIVE_CREDENTIAL The credentials were invalid.
GSS_S_FAILURE The routine failed. Check the minor_status parameter for details.
GSS_S_NO_CRED The routine could not access the credentials.
Related Information
Functions: gss_acquire_cred(3sec)