shishi_tkt_ok_as_delegate_p(3)

📦
version 1.0.3 · 2 versions
  • 1.0.3 · debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking (latest)
  • 1.0.2 · ubuntu jammy
, in debian bookworm, debian trixie, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 shishi_tkt_ok_as_delegate_p — bestie edition 💖

okay so this page lives in the shishi manual, section 3 (that's the library-call section, iykyk), and it's literally just one function that answers one very specific question. let's get into it 🦋

✨ NAME ✨

shishi_tkt_ok_as_delegate_p — an API function, bestie. that's it, that's the whole name. it's giving "i do one thing and i do it well" 💅

🌸 SYNOPSIS 🌸

#include <shishi.h>

int shishi_tkt_ok_as_delegate_p(Shishi_tkt * tkt);

like, you pull in shishi.h and then you can call it. no cap.

🎀 ARGUMENTS 🎀

  • Shishi_tkt * tkt — the input variable holding your ticket info. this is the ticket we're gonna vibe-check. that's the whole guest list, just the one 💜

👑 DESCRIPTION 👑

so the whole point: this function figures out whether a ticket is ok as a delegated ticket. yes, that's really what it does. it's a yes/no girlie.

now here's the lore. the copy of the ticket flags that lives in the encrypted part of the KDC reply might have the OK-AS-DELEGATE flag set. when it is, that's the realm telling the client: "hey, per policy of the realm, the server named in this ticket has been determined to be a suitable recipient of delegation." so it's basically a little realm-issued stamp of approval ⭐

and what does a client do with that stamp? it can use the presence of this flag to help it decide whether to delegate credentials to this server — and when we say delegate credentials, we mean either granting a proxy or handing over a forwarded ticket-granting ticket. big deal energy, fr fr.

important caveat tho: it is acceptable to ignore the value of this flag. like, you're allowed to just not care. it's a helper, not a mandate 🙈

and one more thing for the admins in the chat: when you're setting this flag, you should consider the security and placement of the server that the service will run on, plus whether the service actually requires the use of delegated credentials. don't just set it because it looks cute. be responsible, bestie 🫶

⭐ RETURN VALUE ⭐

returns non-0 iff the ok-as-delegate flag is set in the ticket. otherwise you get 0. simple as that, no crumbs 🍓

💀 REPORTING BUGS 💀

found a bug? not me manifesting that but okay. report bugs to <bug-shishi@gnu.org>.

Copyright © 2002-2022 Simon Josefsson.

copying and distribution of this file, with or without modification, are permitted in any medium without royalty provided the copyright notice and this notice are preserved. so like, go off, but keep the receipts 💖

🧚 SEE ALSO 🧚

the full documentation for shishi is maintained as a Texinfo manual. if the info and shishi programs are properly installed at your site, the command

info shishi

should give you access to the complete manual. go read it, it's the main character of the docs fr.

and that's the whole page!! this one shipped as shishi 1.0.3, and it's the shishi_tkt_ok_as_delegate_p(3) page from the shishi manual — section 3, library calls, my beloved. mwah, study it, slay, bye 💅✨

📦 where this page comes from