NAME

rsec_pwd_mgmt_gen_pwd — Generates a set of passwords

Synopsis

void rsec_pwd_mgmt_gen_pwd(
handle_t pwd_mgmt_svr_h,
sec_rgy_name_t princ_name,
unsigned32 plcy_args,
sec_attr_t plcy[!],
sec_bytes_t gen_info_in,
unsigned32 num_pwds,
unsigned32 ∗num_returned,
sec_passwd_rec_t gen_pwd_set[!],
sec_bytes_t ∗gen_info_out,
error_status_t ∗stp);

Parameters

Input

pwd_mgmt_svr_h
An RPC binding handle to the password management server exporting this operation.

princ_name
The name of the principal requesting the generated passwords.

plcy_argsThe size of the plcy[!] array. 

plcy[!]An array of extended registry attributes, each specifying a password management policy of some sort.  The contents of this array are as follows:

plcy[0]Effective registry password minimum length for the principal. 

plcy[1]Effective registry password policy flags for the principal, describing limitations on password characters. 

gen_info_in
An NDR pickle containing additional information needed to generate the passwords.  There are currently no encoding types defined.

num_pwdsThe number of generated passwords requested. 

Output

num_returned
The number of generated passwords returned.

gen_pwd_set[!]
An array of generated passwords, each stored in a sec_passwd_rec_t structure. 

gen_info_out
An NDR pickle containing additional information returned by the password management server.  There are currently no encoding types defined.

stpA pointer to the completion status.  On successful completion, the routine returns error_status_ok.  Otherwise, it returns an error. 

Description

The rsec_pwd_mgmt_gen_pwd() routine returns a set of generated passwords. 

Notes

This function is not intended to be called by application programmers.  The sec_pwd_mgmt() API provides all the functionality necessary to retrieve generated passwords.  This reference page is provided for programmers who want to write their own password management servers. 

This network interface is called on the client side via the sec_pwd_mgmt_gen_pwd() operation.  Developers are responsible for implementing the server side of this interface. (pwd_strengthd(8sec) is provided as a sample implementation.) 

The plcy[!] parameter is intended to be expandable to allow administrators to attach new password policy ERAs to a principal.  This feature is, however, currently unsupported, and the plcy[!] parameter consists only of the entries described in this reference page. 

Files

/usr/include/dce/sec_pwd_mgmt.idl
The idl file from which dce/sec_pwd_mgmt.h was derived. 

Errors

The following describes a partial list of errors that might be returned.  Refer to the OSF DCE Problem Determination Guide for complete descriptions of all error messages. 

sec_pwd_mgmt_not_authorized
The user is not authorized to call this API.

sec_pwd_mgmt_svr_error
Password management server generic error.  Additional information is usually logged by the password management server.

error_status_ok
The call was successful.

Related Information

Functions: pwd_strengthd(8sec), rsec_pwd_mgmt_str_chk(3sec), sec_intro(3sec), sec_pwd_mgmt_gen_pwd(3sec).