gss_acquire_cred(3)gss_acquire_cred(3)NAMEgss_acquire_cred() - allow an application to acquire a handle for an
existing, named credential
SYNOPSISDESCRIPTION
The routine allows an application to obtain a handle for a pre-existing
credential by name. The credentials could be either an ACCEPT, INITI‐
ATE, or BOTH. The application then passes the credential handle to
either the or the routine. If desired_name is the call is interpreted
as a request for a credential handle that will invoke default behavior.
Input Parameters
desired_name Specifies the principal name to use for the cre‐
dential.
time_req Number of seconds that credentials remain valid.
Specify to request that the credentials have the
maximum permitted lifetime.
desired_mechs Specifies the OID set for the security mechanism
to use with the credential. To help ensure
portability of your application, request the
default security mechanism by specifying
cred_usage Specify one of the following:
Specifies credentials that the context initiator
can use to either initiate or accept security
contexts.
Specifies credentials that the context initiator
can use only to initiate
security contexts.
Specifies credentials that the context initiator
can use only to accept
security contexts.
Output Parameters
output_cred_handle Returns the handle for the return credential.
actual_mechs Returns a set of mechanisms for which the creden‐
tial is valid. This information is optional. If
you do not want a set of mechanisms returned,
specify NULL.
time_rec Returns the actual number of seconds for which
the return credential remains valid. This infor‐
mation is optional. If the actual number of sec‐
onds is not required, specify NULL.
minor_status Returns a status code from the security mecha‐
nism.
STATUS CODES
The following list explains the GSS status codes that can be returned:
The routine was completed successfully.
The requested security mechanism is unsupported or unavailable.
The name passed by the desired_name parameter is unsupported.
An invalid name was passed by the
desired_name parameter.
The credentials could not be acquired, because they have expired.
No credentials were found for the specified name.
The routine failed. See the
minor_status parameter return value for more
information.
AUTHOR
was developed by Sun Microsystems, Inc.
SEE ALSOgss_init_sec_context(3).
The manpages for DCE-GSSAPI are included with the DCE-CoreTools prod‐
uct. To see those manpages add to
gss_acquire_cred(3)