NAME

gss_inquire_cred — Provides the calling application information about a credential

Synopsis

OM_uint32  gss_inquire_cred(
OM_uint32 ∗minor_status,
gss_cred_id_t cred_handle,
gss_name_t ∗name,
OM_uint32 ∗lifetime,
int ∗cred_usage,
gss_OID_set ∗mechs);

Parameters

Input

cred_handle
Specifies a handle for the target credential.  To get information about the default credential, specify GSS_C_NO_CREDENTIAL. 

Output

nameReturns the principal name asserted by the credential.  If the principal name is not required, specify NULL. 

lifetimeReturns the number of seconds for which the credential will remain valid. 

If the credential expired, the parameter returns a 0 (zero).  If there is no credential expiration, the parameter returns the value GSS_C_INDEFINITE.  If an expiration time is not required, specify NULL. 

cred_usageReturns one of the following values describing how the application can use the credential:

   •GSS_C_INITIATE

   •GSS_C_ACCEPT

   •GSS_C_BOTH

If no usage information is required, specify NULL. 

mechsReturns a set of security mechanisms supported by the credential, as follows:

   •GSSDCE_C_OID_DCE_KRBV5_DES (for DCE security)

   •GSSDCE_C_OID_KRBV5_DES (for Kerberos)

minor_status
Returns a status code from the security mechanism.

Description

The gss_inquire_cred() routine provides information about a credential to the calling application.  The calling application must first have called the gss_acquire_cred() routine for a handle for the credential. 

Status Codes

The following describes a partial list of codes (messages) that might be returned.  Refer to the OSF DCE Problem Determination Guide for complete descriptions of all messages.  The following status codes can be returned:

GSS_S_COMPLETE
The routine was completed successfully.

GSS_S_CREDENTIALS_EXPIRED
The credentials expired.  If the lifetime parameter was passed as NULL, it is set to 0 (zero). 

GSS_S_DEFECTIVE_CREDENTIAL
The credentials were invalid.

GSS_S_FAILURE
The routine failed.  Check the minor_status parameter for details. 

GSS_S_NO_CRED
The routine could not access the credentials.

Related Information

Functions: gss_acquire_cred(3sec).