Return to kuserok.3 CVS log

Up to [CSRG BSD Unix] / 43BSDReno / kerberosIV / man

Annotation of 43BSDReno/kerberosIV/man/kuserok.3, revision 1.1.1.1

1.1       root        1: .\" $Source: /usr/src/kerberosIV/man/RCS/kuserok.3,v $
                      2: .\" $Author: kfall $
                      3: .\" $Header: /usr/src/kerberosIV/man/RCS/kuserok.3,v 4.2 90/06/25 21:12:39 kfall Exp $
                      4: .\" Copyright 1989 by the Massachusetts Institute of Technology.
                      5: .\"
                      6: .\" For copying and distribution information,
                      7: .\" please see the file <mit-copyright.h>.
                      8: .\"
                      9: .TH KUSEROK 3 "Kerberos Version 4.0" "MIT Project Athena"
                     10: .SH NAME
                     11: kuserok \- Kerberos version of ruserok
                     12: .SH SYNOPSIS
                     13: .nf
                     14: .nj
                     15: .ft B
                     16: #include <kerberosIV/krb.h>
                     17: .PP
                     18: .ft B
                     19: kuserok(kdata, localuser)
                     20: AUTH_DAT *auth_data;
                     21: char   *localuser;
                     22: .fi
                     23: .ft R
                     24: .SH DESCRIPTION
                     25: .I kuserok
                     26: determines whether a Kerberos principal described by the structure
                     27: .I auth_data
                     28: is authorized to login as user
                     29: .I localuser
                     30: according to the authorization file
                     31: ("~\fIlocaluser\fR/.klogin" by default).  It returns 0 (zero) if authorized,
                     32: 1 (one) if not authorized.
                     33: .PP
                     34: If there is no account for 
                     35: .I localuser
                     36: on the local machine, authorization is not granted.
                     37: If there is no authorization file, and the Kerberos principal described
                     38: by 
                     39: .I auth_data
                     40: translates to 
                     41: .I localuser
                     42: (using 
                     43: .IR krb_kntoln (3)),
                     44: authorization is granted.
                     45: If the authorization file
                     46: can't be accessed, or the file is not owned by
                     47: .IR localuser,
                     48: authorization is denied.  Otherwise, the file is searched for
                     49: a matching principal name, instance, and realm.  If a match is found,
                     50: authorization is granted, else authorization is denied.
                     51: .PP
                     52: The file entries are in the format:
                     53: .nf
                     54: .in +5n
                     55:        name.instance@realm
                     56: .in -5n
                     57: .fi
                     58: with one entry per line.
                     59: .SH SEE ALSO
                     60: kerberos(3), ruserok(3), krb_kntoln(3)
                     61: .SH FILES
                     62: .TP 20n
                     63: ~\fIlocaluser\fR/.klogin
                     64: authorization list

This archive runs on limited infrastructure. Preserving old code on modern bandwidth. Automated agents are requested to crawl responsibly.