globus_gsi...extensions(3)

💅 NAME 💅

globus_gsi_gssapi_extensions — the GSSAPI Extensions, bestie. That's it, that's the whole vibe. Extensions. ✨

---

🦋 SYNOPSIS 🦋

🧺 Topics

Buffer Set Utilities 🧺

Buffer Set Utilities. Yes girl, that's literally the description. Short and iconic. 💖

🎀 Delegation 🎀

Delegation Functions.

🛠️ Functions

Ok so here's the whole lineup of functions, signatures verbatim because we do NOT play with code:

OM_uint32 GSS_CALLCONV gss_export_cred (OM_uint32 *minor_status, const
    gss_cred_id_t cred_handle, const gss_OID desired_mech, OM_uint32
    option_req, gss_buffer_t export_buffer)

Export a GSSAPI credential. 💅

OM_uint32 GSS_CALLCONV gss_import_cred (OM_uint32 *minor_status,
    gss_cred_id_t *output_cred_handle, const gss_OID desired_mech,
    OM_uint32 option_req, const gss_buffer_t import_buffer, OM_uint32
    time_req, OM_uint32 *time_rec)

Import a credential. 🫶

OM_uint32 GSS_CALLCONV gss_inquire_cred_by_oid (OM_uint32 *minor_status,
    const gss_cred_id_t cred_handle, const gss_OID desired_object,
    gss_buffer_set_t *data_set)

Inquire Cred By OID. 🔍

OM_uint32 GSS_CALLCONV gss_inquire_sec_context_by_oid (OM_uint32
    *minor_status, const gss_ctx_id_t context_handle, const gss_OID
    desired_object, gss_buffer_set_t *data_set)

Inquire Sec Context by OID. 🔍✨

OM_uint32 GSS_CALLCONV gss_set_sec_context_option (OM_uint32
    *minor_status, gss_ctx_id_t *context_handle, const gss_OID option,
    const gss_buffer_t value)

Set Security Context Option. 🎛️

---

🌈 Detailed Description 🌈

Extensions. 💫

So like, these are the Experimental GSSAPI routines, defined right here. Heads up bestie — they may change. And the plan? We're looking at adding these to Kerberos as mods, and submitting them to the IETF. Main character energy fr fr. 👑

These extensions are more fully documented in GSS-API Extensions. 📚

---

💖 Function Documentation 💖

🍓 OM_uint32 GSS_CALLCONV gss_export_cred (OM_uint32 * minor_status, const gss_cred_id_t cred_handle, const gss_OID desired_mech, OM_uint32 option_req, gss_buffer_t export_buffer)

Export a GSSAPI credential. It saves the credential so it can be checkpointed and imported by gss_import_cred. Like hitting save before a big boss fight, no cap. 💾✨

Parameters

• minor_status
• cred_handle
• desired_mech — Should either be gss_mech_globus_gssapi_openssl or NULL (in which case gss_mech_globus_gssapi_openssl is assumed). Default behavior, she's easygoing like that. 🧚
• option_req
• export_buffer

Returns

(that's it. empty. the silence is loud. 💀)

---

🎀 OM_uint32 GSS_CALLCONV gss_import_cred (OM_uint32 * minor_status, gss_cred_id_t * output_cred_handle, const gss_OID desired_mech, OM_uint32 option_req, const gss_buffer_t import_buffer, OM_uint32 time_req, OM_uint32 * time_rec)

Import a credential. This function will import credentials exported by gss_export_cred(). It is intended to allow a multiple use application to checkpoint delegated credentials. Obsessed with a good save/restore arc. 🫶

Parameters

• minor_status — The minor status returned by this function. This parameter will be 0 upon success. Zero like my chill when this works. 😌
• output_cred_handle — Upon success, this parameter will contain the imported credential. When no longer needed this credential should be freed using gss_release_cred(). Bestie, free your memory. It's called manners. 💅
• desired_mech — This parameter may be used to specify the desired security mechanism. May be GSS_C_NO_OID.
• option_req — This parameter indicates which option_req value was used to produce the import_buffer.
• import_buffer — A buffer produced by gss_export_credential().
• time_req — The requested period of validity (seconds) for the imported credential. May be NULL.
• time_rec — This parameter will contain the received period of validity of the imported credential upon success. May be NULL.

Return values

• GSS_S_COMPLETE — Success 🎉
• GSS_S_BAD_MECH — Requested security mechanism is unavailable 💀
• GSS_S_DEFECTIVE_TOKEN — import_buffer is defective 🙈
• GSS_S_FAILURE — General failure 😭

---

🔍 OM_uint32 GSS_CALLCONV gss_inquire_cred_by_oid (OM_uint32 * minor_status, const gss_cred_id_t cred_handle, const gss_OID desired_object, gss_buffer_set_t * data_set)

Inquire Cred By OID.

NOTE: Checks both the cert in the credential and the certs in the cert chain for a valid extension that matches the desired OID. The first one found is used, starting with the endpoint cert, and then searching the cert chain. She's thorough, she's searching the whole group chat for receipts. 🔎💖

Parameters

• minor_status
• cred_handle
• desired_object
• data_set

Returns

(still empty, still mysterious, still serving 💫)

---

🎛️ OM_uint32 GSS_CALLCONV gss_set_sec_context_option (OM_uint32 * minor_status, gss_ctx_id_t * context_handle, const gss_OID option, const gss_buffer_t value)

Set Security Context Option. GSSAPI routine to initiate the sending of a security context. See: <draft-ietf-cat-gssv2-cbind-04.txt> 📄✨

Parameters

• minor_status
• context_handle
• option
• value

Returns

(again: nothing listed. we respect the mystery. 🙈)

---

👑 Author 👑

Generated automatically by Doxygen for globus_gssapi_gsi from the source code. Doxygen really said "I'll write your docs for you" and honestly? It ate. 💅

---

okay bestie that's the whole page!! 🦋💖 This little masterpiece is globus_gssapi_gsi Version 14.20, and it's the globus_gsi...extensions(3) page from the Library Functions Manual. Byeee, go gss_export_cred something before you lose it! 🎀✨🌸