HP-UX Reference (11i v3 07/02) - 3 Library Functions A-M (vol 6)

g
gss_init_sec_context(3) gss_init_sec_context(3)
GSS_C_MUTUAL_FLAG
. The True/False values are:
True The context acceptor has been asked to authenticate itself.
False The context initiator has not been asked to authenticates itself.
GSS_C_REPLAY_FLAG
. The True/False values are:
True Replayed signed or sealed messages will be detected.
False Replayed messages will not be detected.
GSS_C_SEQUENCE_FLAG
. The True/False values are:
True Out-of-sequence signed or sealed messages will be detected.
False Out-of-sequence signed or sealed messages will not be detected.
GSS_C_CONF_FLAG
. The True/False values are:
True Request that confidentiality service be made available
False No per-message confidentiality service is required.
GSS_C_INTEG_FLAG. The True/False values are:
True Request that integrity service be be made available
False No per-message integrity service is required.
GSS_C_ANON_FLAG. The True/False values are:
True Do not reveal the initiator’s identity to the acceptor.
False Authenticate normally.
time_req Specifies the desired number of seconds for which the context should remain valid.
To specify the default validity period, use 0 (zero).
input_chan_bindings Specifies the bindings set by the context initiator. Allows the context initiator to
bind the channel identification information securely to the security context. If chan-
nel bindings are not used specify
GSS_C_NO_CHANNEL_BINDINGS
.
input_token Specifies the token received from the context acceptor.
The first time the application calls the routine, you specify
GSS_NO_BUFFER
.
Subsequent calls require a token from the context acceptor.
Input/Output Parameters
context_handle Specifies the context handle for the new context.
The first time the application calls the routine, you specify
GSS_C_NO_CONTEXT
.
Subsequent calls use the value returned by the first call.
Output Parameters
actual_mech_type Returns the OID of the actual mechanism used. Specify NULL if not required.
output_token Returns the token to send to the context acceptor. If the length field of the
returned buffer is 0 (zero), no token is sent.
ret_flags Returns six independent flags, each of which indicates that the context supports a
service option. Specify NULL if not required. The following symbolic names are
provided to correspond to each flag:
GSS_C_DELEG_FLAG. The True/False values are:
True Credentials were delegated to the context acceptor.
False No credentials were delegated.
GSS_C_MUTUAL_FLAG. The True/False values are:
True The context acceptor has been asked to authenticate itself.
False The context acceptor has not been asked to authenticate itself.
GSS_C_REPLAY_FLAG. The True/False values are:
620 Hewlett-Packard Company − 2 − HP-UX 11i Version 3: February 2007