|
gss_create_empty_oid_set(3) -- create a new, empty OID set, to which members can be added
|
The gss_create_empty_oid_set() routine creates a new, empty OID set to which the context initiator can add members. Use the gss_add_oid_set_member() routine to add members to the OID set. These routines are intended to be used to construct sets of mechanism object identifiers, for input to gss_acquire_cred() routine. |
gss_delete_sec_context(3) -- delete a security context
|
The gss_delete_sec_context() routine deletes a security context. It also deletes the local data structures associated with the security context. When it deletes the context, the routine can generate a token. The application passes the token to the context acceptor. The context acceptor then passes the token to the gss_process_context_token() routine, telling it to delete the context and all associ... |
gss_display_name(3) -- provide textual representation of an opaque internal name to an application
|
The gss_display_name() routine provides an application with the text form of an opaque internal name. The application can use the text to display the name but not to print it. |
gss_display_status(3) -- provide an application with the textual representation of a GSSAPI status code that can be displayed to a user
|
The gss_display_status() routine provides the context initiator with a textual representation of a status code so that the application can display the message to a user or log the message. Because some status values can indicate more than one error, the routine enables the calling application to process status codes with multiple messages. The message_context parameter indicates which error messag... |
gss_duplicate_name(3) -- allow an application to create an exact duplicate of the existing internal name
|
The gss_duplicate_name() routine create an exact duplicate of the existing internal name src_name. The new dest_name will be independent of src_name. |
gss_export_name(3) -- convert a mechanism name (MN) to a form suitable for direct comparison
|
The gss_export_name() converts a mechanism name (MN) to export form. |
gss_export_sec_context(3) -- transfer a security context to another process on a single machine
|
The gss_export_sec_context() deactivates the security context for the calling process and creates an interprocess token which, when passed to gss_import_sec_context() in another process, will re-activate the context in the second process. Only a single instantiation of a given context may be active at any one time; a subsequent attempt by a context exporter to access the exported security context ... |
gss_get_mic(3) -- calculate a cryptographic message integrity code (MIC) for a message and return in a token
|
The gss_get_mic() routine generates a cryptographic message integrity code (MIC) for the supplied message and places the MIC in a token for transfer to the peer application. The qop_req parameter allows a choice between several cryptographic algorithms, if supported by the chosen mechanism. |
gss_import_name(3) -- convert a printable name to an internal form
|
The gss_import_name() routine converts a printable name to an internal form. |
gss_import_sec_context(3) -- transfer a security context to another process on a single machine
|
The gss_import_sec_context() routine lets a process to import a security context established by another process. A given interprocess token may be imported only once. |
gss_indicate_mechs(3) -- allow an application to determine which underlying security mechanisms are available
|
The gss_indicate_mechs() routine enables an application to determine which underlying security mechanisms are available. |
gss_init_sec_context(3) -- establish a security context between the context initiator and a context acceptor
|
The gss_init_sec_context() routine is the first step in the establishment of a security context between the context initiator and the context acceptor. To ensure the portability of the application, use its default credential by supplying GSS_C_NO_CREDENTIAL to the claimant_cred_handle parameter. Specify an explicit credential when the application needs an additional credential; for example, to use... |
gss_inquire_context(3) -- obtain information about a security context
|
The gss_inquire_context() routine provides information about the security context to the calling application. The calling application must first have called the gss_acquire_cred() routine for a handle for the credential. |