krb5: Import MIT 1.21.3 - src - FreeBSD source tree

diff options


context:
space:
mode:

author	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
committer	Cy Schubert <cy@FreeBSD.org>	2025-03-19 22:12:25 +0000
commit	8f7d3ef26dec89a92ec0665de84a5936310a5574 (patch)
tree	9a465418bd4056bf0d369751320a414eaed29fa4 /doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html
parent	1a79b20663ca26acc2998b90ea2ff2aefd8af5b1 (diff)

Diffstat (limited to 'doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html')

-rw-r--r--

doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html

1 files changed, 39 insertions, 53 deletions

diff --git a/doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html b/doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html
index a90e31d406a9..1e2d6ea2dd8d 100644
--- a/doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html
+++ b/doc/html/appdev/refs/api/krb5_kdc_verify_ticket.html

@@ -1,35 +1,26 @@

-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"

- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

+<!DOCTYPE html>

-<html xmlns="http://www.w3.org/1999/xhtml">

+<html>

<head>

- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />

+ <meta charset="utf-8" />

+ <meta name="viewport" content="width=device-width, initial-scale=1.0" /><meta name="generator" content="Docutils 0.17.1: http://docutils.sourceforge.net/" />

<title>krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature. — MIT Kerberos Documentation</title>

- <link rel="stylesheet" href="../../../_static/agogo.css" type="text/css" />

- <link rel="stylesheet" href="../../../_static/pygments.css" type="text/css" />

- <link rel="stylesheet" href="../../../_static/kerb.css" type="text/css" />

- <script type="text/javascript">

- var DOCUMENTATION_OPTIONS = {

- URL_ROOT: '../../../',

- VERSION: '1.21.2',

- COLLAPSE_INDEX: false,

- FILE_SUFFIX: '.html',

- HAS_SOURCE: true,

- SOURCELINK_SUFFIX: '.txt'

- };

- </script>

- <script type="text/javascript" src="../../../_static/jquery.js"></script>

- <script type="text/javascript" src="../../../_static/underscore.js"></script>

- <script type="text/javascript" src="../../../_static/doctools.js"></script>

+ <link rel="stylesheet" type="text/css" href="../../../_static/pygments.css" />

+ <link rel="stylesheet" type="text/css" href="../../../_static/agogo.css" />

+ <link rel="stylesheet" type="text/css" href="../../../_static/kerb.css" />

+ <script data-url_root="../../../" id="documentation_options" src="../../../_static/documentation_options.js"></script>

+ <script src="../../../_static/jquery.js"></script>

+ <script src="../../../_static/underscore.js"></script>

+ <script src="../../../_static/doctools.js"></script>

- </head>

- <body>

+ </head><body>

@@ -61,56 +52,50 @@

- <div class="section" id="krb5-kdc-verify-ticket-verify-a-pac-possibly-including-ticket-signature">

+ <section id="krb5-kdc-verify-ticket-verify-a-pac-possibly-including-ticket-signature">

<h1>krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.<a class="headerlink" href="#krb5-kdc-verify-ticket-verify-a-pac-possibly-including-ticket-signature" title="Permalink to this headline">¶</a></h1>

-<dl class="function">

-<dt id="c.krb5_kdc_verify_ticket">

-<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code">krb5_error_code</a> <code class="descname">krb5_kdc_verify_ticket</code><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context">krb5_context</a><em> context</em>, const <a class="reference internal" href="../types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part" title="krb5_enc_tkt_part">krb5_enc_tkt_part</a> *<em> enc_tkt</em>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal">krb5_const_principal</a><em> server_princ</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> server</em>, const <a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock">krb5_keyblock</a> *<em> privsvr</em>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac">krb5_pac</a> *<em> pac_out</em><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kdc_verify_ticket" title="Permalink to this definition">¶</a></dt>

+<dl class="c function">

+<dt class="sig sig-object c" id="c.krb5_kdc_verify_ticket">

+<a class="reference internal" href="../types/krb5_error_code.html#c.krb5_error_code" title="krb5_error_code"><span class="n"><span class="pre">krb5_error_code</span></span></a><span class="w"> </span><span class="sig-name descname"><span class="n"><span class="pre">krb5_kdc_verify_ticket</span></span></span><span class="sig-paren">(</span><a class="reference internal" href="../types/krb5_context.html#c.krb5_context" title="krb5_context"><span class="n"><span class="pre">krb5_context</span></span></a><span class="w"> </span><span class="n"><span class="pre">context</span></span>, <span class="k"><span class="pre">const</span></span><span class="w"> </span><a class="reference internal" href="../types/krb5_enc_tkt_part.html#c.krb5_enc_tkt_part" title="krb5_enc_tkt_part"><span class="n"><span class="pre">krb5_enc_tkt_part</span></span></a><span class="w"> </span><span class="p"><span class="pre">*</span></span><span class="n"><span class="pre">enc_tkt</span></span>, <a class="reference internal" href="../types/krb5_const_principal.html#c.krb5_const_principal" title="krb5_const_principal"><span class="n"><span class="pre">krb5_const_principal</span></span></a><span class="w"> </span><span class="n"><span class="pre">server_princ</span></span>, <span class="k"><span class="pre">const</span></span><span class="w"> </span><a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock"><span class="n"><span class="pre">krb5_keyblock</span></span></a><span class="w"> </span><span class="p"><span class="pre">*</span></span><span class="n"><span class="pre">server</span></span>, <span class="k"><span class="pre">const</span></span><span class="w"> </span><a class="reference internal" href="../types/krb5_keyblock.html#c.krb5_keyblock" title="krb5_keyblock"><span class="n"><span class="pre">krb5_keyblock</span></span></a><span class="w"> </span><span class="p"><span class="pre">*</span></span><span class="n"><span class="pre">privsvr</span></span>, <a class="reference internal" href="../types/krb5_pac.html#c.krb5_pac" title="krb5_pac"><span class="n"><span class="pre">krb5_pac</span></span></a><span class="w"> </span><span class="p"><span class="pre">*</span></span><span class="n"><span class="pre">pac_out</span></span><span class="sig-paren">)</span><a class="headerlink" href="#c.krb5_kdc_verify_ticket" title="Permalink to this definition">¶</a><br /></dt>

-<table class="docutils field-list" frame="void" rules="none">

-<col class="field-name" />

-<col class="field-body" />

-<tbody valign="top">

-<tr class="field-odd field"><th class="field-name">param:</th><td class="field-body"><p class="first"><strong>[in]</strong> <strong>context</strong> - Library context</p>

+<dl class="field-list">

+<dt class="field-odd">param</dt>

+<dd class="field-odd"><p><strong>[in]</strong> <strong>context</strong> - Library context</p>

<p><strong>[in]</strong> <strong>enc_tkt</strong> - Ticket enc-part, possibly containing a PAC</p>

<p><strong>[in]</strong> <strong>server_princ</strong> - Canonicalized name of ticket server</p>

<p><strong>[in]</strong> <strong>server</strong> - Key to validate server checksum (or NULL)</p>

<p><strong>[in]</strong> <strong>privsvr</strong> - Key to validate KDC checksum (or NULL)</p>

-<p class="last"><strong>[out]</strong> <strong>pac_out</strong> - Verified PAC (NULL if no PAC included)</p>

-</td>

-</tr>

-</tbody>

-</table>

-<table class="docutils field-list" frame="void" rules="none">

-<col class="field-name" />

-<col class="field-body" />

-<tbody valign="top">

-<tr class="field-odd field"><th class="field-name">retval:</th><td class="field-body"><ul class="first last simple">

-<li>0 Success; otherwise - Kerberos error codes</li>

+<p><strong>[out]</strong> <strong>pac_out</strong> - Verified PAC (NULL if no PAC included)</p>

+</dd>

+</dl>

+<dl class="field-list simple">

+<dt class="field-odd">retval</dt>

+<dd class="field-odd"><ul class="simple">

+<li><p>0 Success; otherwise - Kerberos error codes</p></li>

</ul>

-</td>

-</tr>

-</tbody>

-</table>

+</dd>

+</dl>

<p>If a PAC is present in <em>enc_tkt</em> , verify its signatures. If <em>privsvr</em> is not NULL and <em>server_princ</em> is not a krbtgt or kadmin/changepw service, require a ticket signature over <em>enc_tkt</em> in addition to the KDC signature. Place the verified PAC in <em>pac_out</em> . If an invalid PAC signature is found, return an error matching the Windows KDC protocol code for that condition as closely as possible.</p>

<p>If no PAC is present in <em>enc_tkt</em> , set <em>pac_out</em> to NULL and return successfully.</p>

-<p class="first admonition-title">Note</p>

-<p class="last">This function does not validate the PAC_CLIENT_INFO buffer. If a specific value is expected, the caller can make a separate call to <a class="reference internal" href="krb5_pac_verify_ext.html#c.krb5_pac_verify_ext" title="krb5_pac_verify_ext"><code class="xref c c-func docutils literal"><span class="pre">krb5_pac_verify_ext()</span></code></a> with a principal but no keys.</p>

+<p class="admonition-title">Note</p>

+<p>This function does not validate the PAC_CLIENT_INFO buffer. If a specific value is expected, the caller can make a separate call to krb5_pac_verify_ext() with a principal but no keys.</p>

</div>

-<p class="first admonition-title">Note</p>

-<p class="last">New in 1.20</p>

-</div>

+<p class="admonition-title">Note</p>

+<p>New in 1.20</p>

</div>

+</section>

+ <div class="clearer"></div>

</div>

<ul>

<li><a class="reference internal" href="#">krb5_kdc_verify_ticket - Verify a PAC, possibly including ticket signature.</a></li>

@@ -154,6 +139,7 @@

</form>

</div>

</div>

@@ -161,8 +147,8 @@

- <div class="right" ><i>Release: 1.21.2</i><br />

+ <div class="right" ><i>Release: 1.21.3</i><br />

</div>