summaryrefslogtreecommitdiffstats
path: root/utils/gssd/krb5_util.h
diff options
context:
space:
mode:
authorSimo Sorce <simo@redhat.com>2013-03-28 23:48:52 -0400
committerSimo Sorce <simo@redhat.com>2013-04-05 18:39:10 -0400
commit91932e239e8759f921897f1ff536742290b79586 (patch)
treea96cd1dbd9e0b33c3241e98d10644a851a952571 /utils/gssd/krb5_util.h
parent4a918dcd6715d2aefa33daa451e5ecd0c1923846 (diff)
downloadnfs-utils-gss-proxy-mods.tar.gz
nfs-utils-gss-proxy-mods.tar.xz
nfs-utils-gss-proxy-mods.zip
Allow GSSAPI to try to acquire credentials first.gss-proxy-mods
GSSAPI can be given a uid number as a special name, and then gss_acquire_cred() can use the name to try to find credentials for the user. Give GSSAPI a chance to do it on its own, then fallback to the classic method of trolling through the file system to find a credential cache.
Diffstat (limited to 'utils/gssd/krb5_util.h')
-rw-r--r--utils/gssd/krb5_util.h2
1 files changed, 2 insertions, 0 deletions
diff --git a/utils/gssd/krb5_util.h b/utils/gssd/krb5_util.h
index 9f41625..eed1294 100644
--- a/utils/gssd/krb5_util.h
+++ b/utils/gssd/krb5_util.h
@@ -36,6 +36,8 @@ int gssd_refresh_krb5_machine_credential(char *hostname,
char *gssd_k5_err_msg(krb5_context context, krb5_error_code code);
void gssd_k5_get_default_realm(char **def_realm);
+int gssd_acquire_user_cred(uid_t uid, gss_cred_id_t *gss_cred);
+
#ifdef HAVE_SET_ALLOWABLE_ENCTYPES
extern int limit_to_legacy_enctypes;
int limit_krb5_enctypes(struct rpc_gss_sec *sec);