gss_krb5_verify_mic(9)

💅 gss_krb5_verify_mic — like, the Kernel API Manual (section 9) girlies know ✨

okay so bestie, gather round 🫶 this is gss_krb5_verify_mic, and she's a whole vibe — she's the verify_mic for the Kerberos GSS mechanism. no cap, that's literally her job description 💖

---

🌸 SYNOPSIS 🌸

u32 gss_krb5_verify_mic (struct gss_ctx *gctx , struct xdr_buf
*message_buffer , struct xdr_netobj *read_token );

like, look at her signature. she ate. 🔥

---

🎀 ARGUMENTS 🎀

• gctx — the GSS context, aka the main character of this whole operation 👑
• message_buffer — the plaintext you wanna check, fr fr
• read_token — the received checksum you're checking, iykyk 💅

---

🦋 DESCRIPTION 🦋

okay so this function returns a status, and ngl the return values are the whole plot. here's the vibe check 💜:

• GSS_S_COMPLETE — slay!! 🎉 the computed checksum and the received checksum match. iconic behavior, no notes.
• GSS_S_DEFECTIVE_TOKEN — the received checksum is not valid 😭 absolutely not, it's giving defective token energy, throw the whole thing away.
• GSS_S_BAD_SIG — computed and received checksums do not match 💀 they're beefing. it's not giving matched. it's giving BAD SIG.
• GSS_S_FAILURE — the received checksum could not be checked 🙈 like she simply didn't get to do her job, we don't know why.
• GSS_S_CONTEXT_EXPIRED — the Kerberos context is no longer valid 🥀 rest in peace, context, you had a good run. your time is up, bestie.

⚠️ heads up boo: each of these statuses is a distinct outcome and they are NOT the same thing. matching = GSS_S_COMPLETE, mismatching = GSS_S_BAD_SIG, invalid token = GSS_S_DEFECTIVE_TOKEN, couldn't even check = GSS_S_FAILURE, context gone = GSS_S_CONTEXT_EXPIRED. memorize them or perish 💅

---

✨ SEE ALSO ✨

• Kernel file ./net/sunrpc/auth_gss/gss_krb5_mech.c — go read her source, she's gorgeous 🌈
• gss_krb5_errno_to_status(9)
• gss_krb5_get_mic(9)
• gss_krb5_wrap(9)
• gss_krb5_unwrap(9)

basically the whole friend group 🫶 they're all linked, go say hi ⭐

---

mwah 💋 that's the whole page — courtesy of the source tree at ./net/sunrpc/auth_gss, dated October 2026, from your favorite Kernel API Manual 🧚✨ bestie signing off, ily, go verify those MICs 🎀💖