GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  -  RPC_GSS_SET_CALLBACK (3)

NAME

rpc_gss_set_callback - Register a security context creation callback

CONTENTS

Library
Synopsis
Description
Parameters
Return Values
See Also
History
Authors
Bugs

LIBRARY


.Lb librpcsec_gss

SYNOPSIS


.In rpc/rpcsec_gss.h bool_t
.Fo (*callback) struct svc_req *req gss_cred_id_t deleg gss_ctx_id_t gss_context rpc_gss_lock_t *lock void **cookie
.Fc bool_t rpc_gss_set_callback rpc_gss_callback_t *cb

DESCRIPTION

Register a function which will be called when new security contexts are created on a server. This function will be called on the first RPC request which uses that context and has the opportunity of rejecting the request (for instance after matching the request credentials to an access control list). To accept the new security context, the callback should return TRUE, otherwise FALSE. If the callback accepts a context, it becomes responsible for the lifetime of the delegated client credentials (if any).

It is also possible to ’lock’ the values of service and quality of protection used by the context. If a context is locked, any subsequent requests which use different values for service and quality of protection will be rejected.

PARAMETERS

cb A structure containing the RPC program and version for this callback and a function which will be called when new contexts are created for the given RPC program and version
req The RPC request using the new context
deleg GSS-API delegated credentials (if any)
gss_context
  The GSS-API context
lock A structure used to enforce a particular QOP and service. Set lock->locked to TRUE to lock the service and QOP values
cookie The callback function may set *cookie to any pointer sized value. This value can be accessed during the lifetime of the context via rpc_gss_getcred.

RETURN VALUES

Returns TRUE if the callback was registered successfully or FALSE otherwise

SEE ALSO

rpc(3), gssapi(3), rpc_gss_getcred(3) rpcset_gss(3)

HISTORY

The rpc_gss_set_callback function first appeared in
.Fx 8.0 .

AUTHORS

This manual page was written by
.An Doug Rabson Aq dfr@FreeBSD.org .

BUGS

There is no mechanism for informing a server when a security context has been deleted. This makes it difficult to allocate resources (e.g. to return via the callback’s cookie argument).
Search for    or go to Top of page |  Section 3 |  Main Index


Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.