gss_add_cred.3 (2010 09)

gss_add_cred(3) gss_add_cred(3)

Output Parameters

output_cred_handle The returned credential handle, containing the new credential-element and all

the credential-elements from input_cred_handle. If NULL is speciﬁed for this

parameter, the newly acquired credential-element will be added to the credential

identiﬁed by input_cred_handle.

actual_mechs Returns a set of mechanisms for which the credential is valid. This information is

optional. If you do not want a set of mechanisms returned, specify NULL.

initiator_time_rec Speciﬁes the actual number of seconds that credentials remain valid for initiating

security contexts using the speciﬁed mechanism. If the implementation or

mechanism does not support expiration of credentials, the value

GSS_C_INDEFINITE

will be returned.

acceptor_time_rec Speciﬁes the actual number of seconds that credentials remain valid for accepting

security contexts using the speciﬁed mechanism. If the implementation or

mechanism does not support expiration of credentials, the value

GSS_C_INDEFINITE

will be returned.

minor_status Returns a status code from the security mechanism.

STATUS CODES

The following list explains the GSS status codes that can be returned:

GSS_S_COMPLETE The routine was completed successfully.

GSS_S_BAD_MECH The requested security mechanism is unsupported or unavailable.

GSS_S_BAD_NAMETYPE

The name passed by the desired_name parameter is unsupported.

GSS_S_BAD_NAME An invalid name was passed by the desired_name parameter.

GSS_S_DUPLICATE_ELEMENT

The credential already contains an element for the requested mechanism with

overlapping usage and validity period.

GSS_S_CREDENTIALS_EXPIRED

The required credentials could not be added because they have expired.

GSS_S_NO_CRED No credentials were found for the speciﬁed name.

AUTHOR

gss_add_cred() was developed by Sun Microsystems, Inc.