|
|
1.1 ! root 1: .\" $Source: /usr/src/kerberosIV/man/RCS/kuserok.3,v $ ! 2: .\" $Author: kfall $ ! 3: .\" $Header: /usr/src/kerberosIV/man/RCS/kuserok.3,v 4.2 90/06/25 21:12:39 kfall Exp $ ! 4: .\" Copyright 1989 by the Massachusetts Institute of Technology. ! 5: .\" ! 6: .\" For copying and distribution information, ! 7: .\" please see the file <mit-copyright.h>. ! 8: .\" ! 9: .TH KUSEROK 3 "Kerberos Version 4.0" "MIT Project Athena" ! 10: .SH NAME ! 11: kuserok \- Kerberos version of ruserok ! 12: .SH SYNOPSIS ! 13: .nf ! 14: .nj ! 15: .ft B ! 16: #include <kerberosIV/krb.h> ! 17: .PP ! 18: .ft B ! 19: kuserok(kdata, localuser) ! 20: AUTH_DAT *auth_data; ! 21: char *localuser; ! 22: .fi ! 23: .ft R ! 24: .SH DESCRIPTION ! 25: .I kuserok ! 26: determines whether a Kerberos principal described by the structure ! 27: .I auth_data ! 28: is authorized to login as user ! 29: .I localuser ! 30: according to the authorization file ! 31: ("~\fIlocaluser\fR/.klogin" by default). It returns 0 (zero) if authorized, ! 32: 1 (one) if not authorized. ! 33: .PP ! 34: If there is no account for ! 35: .I localuser ! 36: on the local machine, authorization is not granted. ! 37: If there is no authorization file, and the Kerberos principal described ! 38: by ! 39: .I auth_data ! 40: translates to ! 41: .I localuser ! 42: (using ! 43: .IR krb_kntoln (3)), ! 44: authorization is granted. ! 45: If the authorization file ! 46: can't be accessed, or the file is not owned by ! 47: .IR localuser, ! 48: authorization is denied. Otherwise, the file is searched for ! 49: a matching principal name, instance, and realm. If a match is found, ! 50: authorization is granted, else authorization is denied. ! 51: .PP ! 52: The file entries are in the format: ! 53: .nf ! 54: .in +5n ! 55: name.instance@realm ! 56: .in -5n ! 57: .fi ! 58: with one entry per line. ! 59: .SH SEE ALSO ! 60: kerberos(3), ruserok(3), krb_kntoln(3) ! 61: .SH FILES ! 62: .TP 20n ! 63: ~\fIlocaluser\fR/.klogin ! 64: authorization list
This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.