krb5_compare_creds -- compare Kerberos 5 credentials
Kerberos 5 Library (libkrb5, -lkrb5)
krb5_compare_creds(krb5_context context, krb5_flags whichfields,
const krb5_creds *mcreds, const krb5_creds *creds);
krb5_compare_creds() compares mcreds (usually filled in by the applica-
tion) to creds (most often from a credentials cache) and return TRUE if
they are equal. Unless mcreds->server is NULL, the service of the cre-
dentials are always compared. If the client name in mcreds is present,
the client names are also compared. This function is normally only called
indirectly via krb5_cc_retrieve_cred(3).
The following flags, set in whichfields, affects the comparison:
KRB5_TC_MATCH_SRV_NAMEONLY Consider all realms equal when compar-
ing the service principal.
KRB5_TC_MATCH_KEYTYPE Compare enctypes.
KRB5_TC_MATCH_FLAGS_EXACT Make sure that the ticket flags are
KRB5_TC_MATCH_FLAGS Make sure that all ticket flags set in
mcreds are also present in creds.
KRB5_TC_MATCH_TIMES_EXACT Compares the ticket times exactly.
KRB5_TC_MATCH_TIMES Compares only the expiration times of
KRB5_TC_MATCH_AUTHDATA Compares the authdata fields.
KRB5_TC_MATCH_2ND_TKT Compares the second tickets (used by
KRB5_TC_MATCH_IS_SKEY Compares the existance of the second
krb5(3), krb5_cc_retrieve_cred(3), krb5_creds(3), krb5_get_init_creds(3),
HEIMDAL May 10, 2005 HEIMDAL
Man(1) output converted with