.TH "globus_gsi_gssapi_extensions" 3 "Wed Feb 27 2019" "Version 14.10" "globus_gssapi_gsi" \" -*- nroff -*- .ad l .nh .SH NAME globus_gsi_gssapi_extensions \- Extensions\&. .SH SYNOPSIS .br .PP .SS "Modules" .in +1c .ti -1c .RI "\fBBuffer Set Utilities\fP" .br .RI "Buffer Set Utilities\&. " .ti -1c .RI "\fBDelegation\fP" .br .RI "Delegation Functions\&. " .in -1c .SS "Functions" .in +1c .ti -1c .RI "OM_uint32 GSS_CALLCONV \fBgss_export_cred\fP (OM_uint32 *minor_status, const gss_cred_id_t cred_handle, const gss_OID desired_mech, OM_uint32 option_req, gss_buffer_t export_buffer)" .br .RI "Export a GSSAPI credential\&. " .ti -1c .RI "OM_uint32 GSS_CALLCONV \fBgss_import_cred\fP (OM_uint32 *minor_status, gss_cred_id_t *output_cred_handle, const gss_OID desired_mech, OM_uint32 option_req, const gss_buffer_t import_buffer, OM_uint32 time_req, OM_uint32 *time_rec)" .br .RI "Import a credential\&. " .ti -1c .RI "OM_uint32 GSS_CALLCONV \fBgss_inquire_cred_by_oid\fP (OM_uint32 *minor_status, const gss_cred_id_t cred_handle, const gss_OID desired_object, gss_buffer_set_t *data_set)" .br .RI "Inquire Cred By OID\&. " .ti -1c .RI "OM_uint32 GSS_CALLCONV \fBgss_inquire_sec_context_by_oid\fP (OM_uint32 *minor_status, const gss_ctx_id_t context_handle, const gss_OID desired_object, gss_buffer_set_t *data_set)" .br .RI "Inquire Sec Context by OID\&. " .ti -1c .RI "OM_uint32 GSS_CALLCONV \fBgss_set_sec_context_option\fP (OM_uint32 *minor_status, gss_ctx_id_t *context_handle, const gss_OID option, const gss_buffer_t value)" .br .RI "Set Security Context Option\&. " .in -1c .SH "Detailed Description" .PP Extensions\&. Experimental GSSAPI routines are defined here\&. These may change, and we will be looking at adding these to Kerberos as mods, and submitting them to the IETF\&. .PP These extensions are more fully documented in \fCGSS-API Extensions\fP .SH "Function Documentation" .PP .SS "OM_uint32 GSS_CALLCONV gss_export_cred (OM_uint32 * minor_status, const gss_cred_id_t cred_handle, const gss_OID desired_mech, OM_uint32 option_req, gss_buffer_t export_buffer)" .PP Export a GSSAPI credential\&. Saves the credential so it can be checkpointed and imported by gss_import_cred .PP \fBParameters:\fP .RS 4 \fIminor_status\fP .br \fIcred_handle\fP .br \fIdesired_mech\fP Should either be gss_mech_globus_gssapi_openssl or NULL (in which case gss_mech_globus_gssapi_openssl is assumed)\&. .br \fIoption_req\fP .br \fIexport_buffer\fP .RE .PP \fBReturns:\fP .RS 4 .RE .PP .SS "OM_uint32 GSS_CALLCONV gss_import_cred (OM_uint32 * minor_status, gss_cred_id_t * output_cred_handle, const gss_OID desired_mech, OM_uint32 option_req, const gss_buffer_t import_buffer, OM_uint32 time_req, OM_uint32 * time_rec)" .PP Import a credential\&. This function will import credentials exported by \fBgss_export_cred()\fP\&. It is intended to allow a multiple use application to checkpoint delegated credentials\&. .PP \fBParameters:\fP .RS 4 \fIminor_status\fP The minor status returned by this function\&. This parameter will be 0 upon success\&. .br \fIoutput_cred_handle\fP Upon success, this parameter will contain the imported credential\&. When no longer needed this credential should be freed using \fBgss_release_cred()\fP\&. .br \fIdesired_mech\fP This parameter may be used to specify the desired security mechanism\&. May be GSS_C_NO_OID\&. .br \fIoption_req\fP This parameter indicates which option_req value was used to produce the import_buffer\&. .br \fIimport_buffer\fP A buffer produced by gss_export_credential()\&. .br \fItime_req\fP The requested period of validity (seconds) for the imported credential\&. May be NULL\&. .br \fItime_rec\fP This parameter will contain the received period of validity of the imported credential upon success\&. May be NULL\&. .RE .PP \fBReturn values:\fP .RS 4 \fIGSS_S_COMPLETE\fP Success .br \fIGSS_S_BAD_MECH\fP Requested security mechanism is unavailable .br \fIGSS_S_DEFECTIVE_TOKEN\fP import_buffer is defective .br \fIGSS_S_FAILURE\fP General failure .RE .PP .SS "OM_uint32 GSS_CALLCONV gss_inquire_cred_by_oid (OM_uint32 * minor_status, const gss_cred_id_t cred_handle, const gss_OID desired_object, gss_buffer_set_t * data_set)" .PP Inquire Cred By OID\&. NOTE: Checks both the cert in the credential and the certs in the cert chain for a valid extension that matches the desired OID\&. The first one found is used, starting with the endpoint cert, and then searching the cert chain\&. .PP \fBParameters:\fP .RS 4 \fIminor_status\fP .br \fIcred_handle\fP .br \fIdesired_object\fP .br \fIdata_set\fP .RE .PP \fBReturns:\fP .RS 4 .RE .PP .SS "OM_uint32 GSS_CALLCONV gss_set_sec_context_option (OM_uint32 * minor_status, gss_ctx_id_t * context_handle, const gss_OID option, const gss_buffer_t value)" .PP Set Security Context Option\&. GSSAPI routine to initiate the sending of a security context See: .PP \fBParameters:\fP .RS 4 \fIminor_status\fP .br \fIcontext_handle\fP .br \fIoption\fP .br \fIvalue\fP .RE .PP \fBReturns:\fP .RS 4 .RE .PP .SH "Author" .PP Generated automatically by Doxygen for globus_gssapi_gsi from the source code\&.