KRB5_ANAME_TO_LOCALNAME(3) UNIX Programmer's Manual KRB5_ANAME_TO_LOCALNAME(3) NNAAMMEE kkrrbb55__aannaammee__ttoo__llooccaallnnaammee - converts a principal to a system local name. LLIIBBRRAARRYY Kerberos 5 Library (libkrb5, -lkrb5) SSYYNNOOPPSSIISS _k_r_b_5___b_o_o_l_e_a_n kkrrbb55__aannaammee__ttoo__llooccaallnnaammee(_k_r_b_5___c_o_n_t_e_x_t _c_o_n_t_e_x_t, _k_r_b_5___c_o_n_s_t___p_r_i_n_c_i_p_a_l _n_a_m_e, _s_i_z_e___t _l_n_s_i_z_e, _c_h_a_r _*_l_n_a_m_e) DDEESSCCRRIIPPTTIIOONN This function takes a principal _n_a_m_e, verifies its in the local realm (using kkrrbb55__ggeett__ddeeffaauulltt__rreeaallmmss()) and then returns the local name of the principal. If _n_a_m_e isn't in one of the local realms and error is returned. If size (_l_n_s_i_z_e) of the local name (_l_n_a_m_e) is to small, an error is re- turned. kkrrbb55__aannaammee__ttoo__llooccaallnnaammee() should only be use by application that imple- ments protocols that doesn't transport the login name and thus needs to convert a principal to a local name. Protocols should be designed so that the it autheticates using Kerberos, send over the login name and then verifies in the principal that authen- ticated is allowed to login and the login name. A way to check if a user is allowed to login is using the function kkrrbb55__kkuusseerrookk(). SSEEEE AALLSSOO krb5_get_default_realms(3), krb5_kuserok(3) HEIMDAL March 17, 2003 1