2 KRB5_KUSEROK(3) UNIX Programmer's Manual KRB5_KUSEROK(3)
5 k
\bkr
\brb
\bb5
\b5_
\b_k
\bku
\bus
\bse
\ber
\bro
\bok
\bk - verifies if a principal can log in as a
7 L
\bLI
\bIB
\bBR
\bRA
\bAR
\bRY
\bY
8 Kerberos 5 Library (libkrb5, -lkrb5)
10 S
\bSY
\bYN
\bNO
\bOP
\bPS
\bSI
\bIS
\bS
11 _
\bk_
\br_
\bb_
\b5_
\b__
\bb_
\bo_
\bo_
\bl_
\be_
\ba_
\bn
12 k
\bkr
\brb
\bb5
\b5_
\b_k
\bku
\bus
\bse
\ber
\bro
\bok
\bk(_
\bk_
\br_
\bb_
\b5_
\b__
\bc_
\bo_
\bn_
\bt_
\be_
\bx_
\bt _
\bc_
\bo_
\bn_
\bt_
\be_
\bx_
\bt, _
\bk_
\br_
\bb_
\b5_
\b__
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl,
13 _
\bc_
\bo_
\bn_
\bs_
\bt _
\bc_
\bh_
\ba_
\br _
\b*_
\bn_
\ba_
\bm_
\be)
15 D
\bDE
\bES
\bSC
\bCR
\bRI
\bIP
\bPT
\bTI
\bIO
\bON
\bN
16 This function takes a local user _
\bn_
\ba_
\bm_
\be and verifies if _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl is al-
17 lowed to log in as that user.
19 First k
\bkr
\brb
\bb5
\b5_
\b_k
\bku
\bus
\bse
\ber
\bro
\bok
\bk check if there is a local account name _
\bu_
\bs_
\be_
\br_
\bn_
\ba_
\bm_
\be_
\b. If
20 there isn't, k
\bkr
\brb
\bb5
\b5_
\b_k
\bku
\bus
\bse
\ber
\bro
\bok
\bk returns FALSE.
22 Then k
\bkr
\brb
\bb5
\b5_
\b_k
\bku
\bus
\bse
\ber
\bro
\bok
\bk checks if principal is the same as user@realm in any of
23 the default realms. If that is the case, k
\bkr
\brb
\bb5
\b5_
\b_k
\bku
\bus
\bse
\ber
\bro
\bok
\bk returns TRUE.
25 After that it reads the file _
\b._
\bk_
\b5_
\bl_
\bo_
\bg_
\bi_
\bn (if it exists) in the users home
26 directory and checks if _
\bp_
\br_
\bi_
\bn_
\bc_
\bi_
\bp_
\ba_
\bl is in the file. If it does exists,
27 TRUE is returned. If neither of the above turns out to be true, is re-
30 The _
\b._
\bk_
\b5_
\bl_
\bo_
\bg_
\bi_
\bn should contain one principal per line.
32 S
\bSE
\bEE
\bE A
\bAL
\bLS
\bSO
\bO
33 krb5_get_default_realms(3), krb5_verify_user(3),
34 krb5_verify_user_lrealm(3), krb5_verify_user_opt(3,) krb5.conf(5)
36 HEIMDAL Oct 17, 2002 1