krb5_kt_get_entry()--Get Entry from Key Table


  Syntax 
 #include <krb5.h>

 krb5_error_code krb5_kt_get_entry(
     krb5_context       context,
     krb5_keytab      ktid,
     krb5_principal     principal,  
     krb5_kvno        vno,
     krb5_enctype     enctype,
     krb5_keytab_entry *    entry);
  Service Program Name: QSYS/QKRBGSS

  Default Public Authority: *USE

  Threadsafe: Yes

The krb5_kt_get_entry() function returns an entry from the key table.


Authorities

Object Referred to Data Authority Required
All directories in the path name *X
Keytab file *RW


Parameters

context  (Input)
The Kerberos context.

ktid  (Input)
The key table handle.

principal  (Input)
The principal.

vno  (Input)
The key version number for the key to be retrieved. Specify a version number of zero to retrieve the key with the highest version number.

enctype  (Input)
The key encryption type. Specify zero as the encryption type if the encryption type does not matter.

entry  (Output)
The contents of the key table entry. The krb5_kt_free_entry() routine should be called to release the entry contents when they are no longer needed.

Return Value

If no errors occur, the return value is 0. Otherwise, a Kerberos error code is returned.


Error Messages

Message ID Error Message Text
CPE3418 E Possible APAR condition or hardware failure.


Usage Notes

  1. The entry returned is the first one found in the key table that matches the requested principal and version, and uses a compatible encryption type. For example, an entry that uses ENCTYPE_DES_CBC_MD5 is compatible with a requested encryption type of ENCTYPE_DES_CBC_CRC.

API introduced: V5R1

[ Back to top | Security APIs | UNIX-Type APIs | APIs by category ]