Партнёры:
Хостинг:
gss_acquire_cred - Obtain a GSS-API credential handle for pre-existing credentials
If desired_name is
GSS_C_NO_NAME
the call is interpreted as a
request for a credential handle that will invoke default behavior
when passed to
gss_init_sec_context ();
(if cred_usage is
GSS_C_INITIATE
or
GSS_C_BOTH
or
gss_accept_sec_context ();
(if cred_usage is
GSS_C_ACCEPT
or
GSS_C_BOTH ).
Mechanisms should honor the Fa desired_mechs parameter, and return a credential that is suitable to use only with the requested mechanisms. An exception to this is the case where one underlying credential element can be shared by multiple mechanisms; in this case it is permissible for an implementation to indicate all mechanisms with which the credential element may be used. If Fa desired_mechs is an empty set, behavior is undefined.
This routine is expected to be used primarily by context acceptors,
since implementations are likely to provide mechanism-specific ways
of obtaining GSS-API initiator credentials from the system login
process.
Some implementations may therefore not support the acquisition of
GSS_C_INITIATE
or
GSS_C_BOTH
credentials via
gss_acquire_cred ();
for any name other than
GSS_C_NO_NAME
or a name produced by applying either
gss_inquire_cred ();
to a valid credential, or
gss_inquire_context ();
to an active context.
If credential acquisition is time-consuming for a mechanism,
the mechanism may choose to delay the actual acquisition until the
credential is required
(e.g. by
gss_init_sec_context ();
or
gss_accept_sec_context ().);
Such mechanism-specific implementation
decisions should be invisible to the calling application;
thus a call of
gss_inquire_cred ();
immediately following the call of
gss_acquire_cred ();
must return valid credential data,
and may therefore incur the overhead of a deferred credential acquisition.
This document and translations of it may be copied and furnished to others, and derivative works that comment on or otherwise explain it or assist in its implementation may be prepared, copied, published and distributed, in whole or in part, without restriction of any kind, provided that the above copyright notice and this paragraph are included on all such copies and derivative works. However, this document itself may not be modified in any way, such as by removing the copyright notice or references to the Internet Society or other Internet organizations, except as needed for the purpose of developing Internet standards in which case the procedures for copyrights defined in the Internet Standards process must be followed, or as required to translate it into languages other than English.
The limited permissions granted above are perpetual and will not be revoked by the Internet Society or its successors or assigns.
This document and the information contained herein is provided on an "AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
|
Закладки на сайте Проследить за страницей |
Created 1996-2024 by Maxim Chirkov Добавить, Поддержать, Вебмастеру |