HP-UX Reference (11i v2 03/08) - 3 Library Functions A-M (vol 6)

g
gss_init_sec_context(3) gss_init_sec_context(3)
GSS_C_MUTUAL_FLAG
. The True/False values are:
True The context acceptor has been asked to authenticate itself.
False The context initiator has not been asked to authenticates itself.
GSS_C_REPLAY_FLAG
. The True/False values are:
True Replayed signed or sealed messages will be detected.
False Replayed messages will not be detected.
GSS_C_SEQUENCE_FLAG
. The True/False values are:
True Out-of-sequence signed or sealed messages will be detected.
False Out-of-sequence signed or sealed messages will not be detected.
GSS_C_CONF_FLAG
. The True/False values are:
True Request that confidentiality service be made available
False No per-message confidentiality service is required.
GSS_C_INTEG_FLAG
. The True/False values are:
True Request that integrity service be be made available
False No per-message integrity service is required.
GSS_C_ANON_FLAG. The True/False values are:
True Do not reveal the initiator’s identity to the acceptor.
False Authenticate normally.
time_req Specifies the desired number of seconds for which the context should remain
valid. To specify the default validity period, use 0 (zero).
input_chan_bindings Specifies the bindings set by the context initiator. Allows the context initiator to
bind the channel identification information securely to the security context. If
channel bindings are not used specify
GSS_C_NO_CHANNEL_BINDINGS
.
input_token Specifies the token received from the context acceptor.
The first time the application calls the routine, you specify
GSS_NO_BUFFER
.
Subsequent calls require a token from the context acceptor.
Input/Output Parameters
context_handle Specifies the context handle for the new context.
The first time the application calls the routine, you specify
GSS_C_NO_CONTEXT. Subsequent calls use the value returned by the first call.
Output Parameters
actual_mech_type Returns the OID of the actual mechanism used. Specify NULL if not required.
output_token Returns the token to send to the context acceptor. If the length field of the
returned buffer is 0 (zero), no token is sent.
ret_flags Returns six independent flags, each of which indicates that the context supports a
service option. Specify NULL if not required. The following symbolic names are
provided to correspond to each flag:
GSS_C_DELEG_FLAG. The True/False values are:
True Credentials were delegated to the context acceptor.
False No credentials were delegated.
GSS_C_MUTUAL_FLAG. The True/False values are:
True The context acceptor has been asked to authenticate itself.
False The context acceptor has not been asked to authenticate itself.
GSS_C_REPLAY_FLAG. The True/False values are:
Section 3−−472 Hewlett-Packard Company − 2 − HP-UX 11i Version 2: August 2003