Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
RPC_GSS_SET_CALLBACK(3)	 BSD Library Functions Manual  RPC_GSS_SET_CALLBACK(3)

NAME
     rpc_gss_set_callback -- Register a	security context creation callback

LIBRARY
     RPC GSS-API Authentication	Library	(librpcsec_gss,	-lrpcsec_gss)

SYNOPSIS
     #include <rpc/rpcsec_gss.h>

     bool_t
     (*callback)(struct	svc_req	*req, gss_cred_id_t deleg,
	 gss_ctx_id_t gss_context, rpc_gss_lock_t *lock, void **cookie);

     bool_t
     rpc_gss_set_callback(rpc_gss_callback_t *cb);

DESCRIPTION
     Register a	function which will be called when new security	contexts are
     created on	a server.  This	function will be called	on the first RPC re-
     quest which uses that context and has the opportunity of rejecting	the
     request (for instance after matching the request credentials to an	access
     control list).  To	accept the new security	context, the callback should
     return TRUE, otherwise FALSE.  If the callback accepts a context, it be-
     comes responsible for the lifetime	of the delegated client	credentials
     (if any).

     It	is also	possible to 'lock' the values of service and quality of	pro-
     tection used by the context.  If a	context	is locked, any subsequent re-
     quests which use different	values for service and quality of protection
     will be rejected.

PARAMETERS
     cb		  A structure containing the RPC program and version for this
		  callback and a function which	will be	called when new	con-
		  texts	are created for	the given RPC program and version

     req	  The RPC request using	the new	context

     deleg	  GSS-API delegated credentials	(if any)

     gss_context  The GSS-API context

     lock	  A structure used to enforce a	particular QOP and service.
		  Set lock-_locked to TRUE to lock the service and QOP values

     cookie	  The callback function	may set	*cookie	to any pointer sized
		  value.  This value can be accessed during the	lifetime of
		  the context via rpc_gss_getcred().

RETURN VALUES
     Returns TRUE if the callback was registered successfully or FALSE other-
     wise

SEE ALSO
     gssapi(3),	rpc(3),	rpc_gss_getcred(3), rpcset_gss(3)

HISTORY
     The rpc_gss_set_callback function first appeared in FreeBSD 8.0.

AUTHORS
     This manual page was written by Doug Rabson <dfr@FreeBSD.org>.

BUGS
     There is no mechanism for informing a server when a security context has
     been deleted.  This makes it difficult to allocate	resources (e.g.	to re-
     turn via the callback's cookie argument).

BSD			       January 26, 2010				   BSD

NAME | LIBRARY | SYNOPSIS | DESCRIPTION | PARAMETERS | RETURN VALUES | SEE ALSO | HISTORY | AUTHORS | BUGS

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=rpc_gss_set_callback&sektion=3&manpath=FreeBSD+12.0-RELEASE+and+Ports>

home | help