Description of the krb5_kuserok(3) plugin facility. More...
Description of the krb5_kuserok(3) plugin facility.
The krb5_kuserok(3) function is pluggable. The plugin is named KRB5_PLUGIN_KUSEROK ("krb5_plugin_kuserok"), with a single minor version, KRB5_PLUGIN_KUSEROK_VERSION_0 (0).
The plugin for krb5_kuserok(3) consists of a data symbol referencing a structure of type krb5plugin_kuserok_ftable, with four fields:
|init||Plugin initialization function (see krb5-plugin(7))|
|minor_version||The plugin minor version number (0)|
|fini||Plugin finalization function|
|kuserok||Plugin kuserok function|
The kuserok field is the plugin entry point that performs the traditional kuserok operation however the plugin desires. It is invoked in no particular order relative to other kuserok plugins, but it has a 'rule' argument that indicates which plugin is intended to act on the rule. The plugin kuserok function must return KRB5_PLUGIN_NO_HANDLE if the rule is not applicable to it.
The plugin kuserok function has the following arguments, in this order: