NAME
shishi_kdcreq_disable_transited_check_p - API function
SYNOPSIS
#include <shishi.h>
int shishi_kdcreq_disable_transited_check_p(Shishi * handle,
Shishi_asn1 kdcreq);
ARGUMENTS
Shishi * handle
shishi handle as allocated by shishi_init().
Shishi_asn1 kdcreq
KDC-REQ variable to get kdc-options field from.
DESCRIPTION
Determine if KDC-Option disable-transited-check flag is set.
By default the KDC will check the transited field of a
ticket-granting-ticket against the policy of the local realm before it
will issue derivative tickets based on the ticket-granting ticket. If
this flag is set in the request, checking of the transited field is
disabled. Tickets issued without the performance of this check will be
noted by the reset (0) value of the TRANSITED-POLICY-CHECKED flag,
indicating to the application server that the tranisted field must be
checked locally. KDCs are encouraged but not required to honor the
DISABLE-TRANSITED-CHECK option.
This flag is new since RFC 1510
RETURN VALUE
Returns non-0 iff disable-transited-check flag is set in KDC-REQ.
REPORTING BUGS
Report bugs to <bug-shishi@gnu.org>.
COPYRIGHT
Copyright © 2002-2010 Simon Josefsson.
Copying and distribution of this file, with or without modification,
are permitted in any medium without royalty provided the copyright
notice and this notice are preserved.
SEE ALSO
The full documentation for shishi is maintained as a Texinfo manual.
If the info and shishi programs are properly installed at your site,
the command
info shishi
should give you access to the complete manual.
shishi shishi_kdcreq_disable_transited_check_p(3)