On this page
Table of contents
- For users
- For administrators
- For application developers
- Developing with GSSAPI
- Differences between Heimdal and MIT Kerberos API
- Initial credentials
- Principal manipulation and parsing
- Complete reference - API and datatypes
- krb5 API
- krb5 types and structures
- krb5 simple macros
- ADDRTYPE_ADDRPORT
- ADDRTYPE_CHAOS
- ADDRTYPE_DDP
- ADDRTYPE_INET
- ADDRTYPE_INET6
- ADDRTYPE_IPPORT
- ADDRTYPE_ISO
- ADDRTYPE_IS_LOCAL
- ADDRTYPE_NETBIOS
- ADDRTYPE_XNS
- AD_TYPE_EXTERNAL
- AD_TYPE_FIELD_TYPE_MASK
- AD_TYPE_REGISTERED
- AD_TYPE_RESERVED
- AP_OPTS_ETYPE_NEGOTIATION
- AP_OPTS_MUTUAL_REQUIRED
- AP_OPTS_RESERVED
- AP_OPTS_USE_SESSION_KEY
- AP_OPTS_USE_SUBKEY
- AP_OPTS_WIRE_MASK
- CKSUMTYPE_CMAC_CAMELLIA128
- CKSUMTYPE_CMAC_CAMELLIA256
- CKSUMTYPE_CRC32
- CKSUMTYPE_DESCBC
- CKSUMTYPE_HMAC_MD5_ARCFOUR
- CKSUMTYPE_HMAC_SHA1_96_AES128
- CKSUMTYPE_HMAC_SHA1_96_AES256
- CKSUMTYPE_HMAC_SHA1_DES3
- CKSUMTYPE_MD5_HMAC_ARCFOUR
- CKSUMTYPE_NIST_SHA
- CKSUMTYPE_RSA_MD4
- CKSUMTYPE_RSA_MD4_DES
- CKSUMTYPE_RSA_MD5
- CKSUMTYPE_RSA_MD5_DES
- ENCTYPE_AES128_CTS_HMAC_SHA1_96
- ENCTYPE_AES256_CTS_HMAC_SHA1_96
- ENCTYPE_ARCFOUR_HMAC
- ENCTYPE_ARCFOUR_HMAC_EXP
- ENCTYPE_CAMELLIA128_CTS_CMAC
- ENCTYPE_CAMELLIA256_CTS_CMAC
- ENCTYPE_DES3_CBC_ENV
- ENCTYPE_DES3_CBC_RAW
- ENCTYPE_DES3_CBC_SHA
- ENCTYPE_DES3_CBC_SHA1
- ENCTYPE_DES_CBC_CRC
- ENCTYPE_DES_CBC_MD4
- ENCTYPE_DES_CBC_MD5
- ENCTYPE_DES_CBC_RAW
- ENCTYPE_DES_HMAC_SHA1
- ENCTYPE_DSA_SHA1_CMS
- ENCTYPE_MD5_RSA_CMS
- ENCTYPE_NULL
- ENCTYPE_RC2_CBC_ENV
- ENCTYPE_RSA_ENV
- ENCTYPE_RSA_ES_OAEP_ENV
- ENCTYPE_SHA1_RSA_CMS
- ENCTYPE_UNKNOWN
- KDC_OPT_ALLOW_POSTDATE
- KDC_OPT_CANONICALIZE
- KDC_OPT_CNAME_IN_ADDL_TKT
- KDC_OPT_DISABLE_TRANSITED_CHECK
- KDC_OPT_ENC_TKT_IN_SKEY
- KDC_OPT_FORWARDABLE
- KDC_OPT_FORWARDED
- KDC_OPT_POSTDATED
- KDC_OPT_PROXIABLE
- KDC_OPT_PROXY
- KDC_OPT_RENEW
- KDC_OPT_RENEWABLE
- KDC_OPT_RENEWABLE_OK
- KDC_OPT_REQUEST_ANONYMOUS
- KDC_OPT_VALIDATE
- KDC_TKT_COMMON_MASK
- KRB5_ALTAUTH_ATT_CHALLENGE_RESPONSE
- KRB5_ANONYMOUS_PRINCSTR
- KRB5_ANONYMOUS_REALMSTR
- KRB5_AP_REP
- KRB5_AP_REQ
- KRB5_AS_REP
- KRB5_AS_REQ
- KRB5_AUTHDATA_AND_OR
- KRB5_AUTHDATA_ETYPE_NEGOTIATION
- KRB5_AUTHDATA_FX_ARMOR
- KRB5_AUTHDATA_IF_RELEVANT
- KRB5_AUTHDATA_INITIAL_VERIFIED_CAS
- KRB5_AUTHDATA_KDC_ISSUED
- KRB5_AUTHDATA_MANDATORY_FOR_KDC
- KRB5_AUTHDATA_OSF_DCE
- KRB5_AUTHDATA_SESAME
- KRB5_AUTHDATA_SIGNTICKET
- KRB5_AUTHDATA_WIN2K_PAC
- KRB5_AUTH_CONTEXT_DO_SEQUENCE
- KRB5_AUTH_CONTEXT_DO_TIME
- KRB5_AUTH_CONTEXT_GENERATE_LOCAL_ADDR
- KRB5_AUTH_CONTEXT_GENERATE_LOCAL_FULL_ADDR
- KRB5_AUTH_CONTEXT_GENERATE_REMOTE_ADDR
- KRB5_AUTH_CONTEXT_GENERATE_REMOTE_FULL_ADDR
- KRB5_AUTH_CONTEXT_PERMIT_ALL
- KRB5_AUTH_CONTEXT_RET_SEQUENCE
- KRB5_AUTH_CONTEXT_RET_TIME
- KRB5_AUTH_CONTEXT_USE_SUBKEY
- KRB5_CRED
- KRB5_CRYPTO_TYPE_CHECKSUM
- KRB5_CRYPTO_TYPE_DATA
- KRB5_CRYPTO_TYPE_EMPTY
- KRB5_CRYPTO_TYPE_HEADER
- KRB5_CRYPTO_TYPE_PADDING
- KRB5_CRYPTO_TYPE_SIGN_ONLY
- KRB5_CRYPTO_TYPE_STREAM
- KRB5_CRYPTO_TYPE_TRAILER
- KRB5_CYBERSAFE_SECUREID
- KRB5_DOMAIN_X500_COMPRESS
- KRB5_ENCPADATA_REQ_ENC_PA_REP
- KRB5_ERROR
- KRB5_FAST_REQUIRED
- KRB5_GC_CACHED
- KRB5_GC_CANONICALIZE
- KRB5_GC_CONSTRAINED_DELEGATION
- KRB5_GC_FORWARDABLE
- KRB5_GC_NO_STORE
- KRB5_GC_NO_TRANSIT_CHECK
- KRB5_GC_USER_USER
- KRB5_GET_INIT_CREDS_OPT_ADDRESS_LIST
- KRB5_GET_INIT_CREDS_OPT_ANONYMOUS
- KRB5_GET_INIT_CREDS_OPT_CANONICALIZE
- KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT
- KRB5_GET_INIT_CREDS_OPT_ETYPE_LIST
- KRB5_GET_INIT_CREDS_OPT_FORWARDABLE
- KRB5_GET_INIT_CREDS_OPT_PREAUTH_LIST
- KRB5_GET_INIT_CREDS_OPT_PROXIABLE
- KRB5_GET_INIT_CREDS_OPT_RENEW_LIFE
- KRB5_GET_INIT_CREDS_OPT_SALT
- KRB5_GET_INIT_CREDS_OPT_TKT_LIFE
- KRB5_INIT_CONTEXT_SECURE
- KRB5_INIT_CONTEXT_KDC
- KRB5_INIT_CREDS_STEP_FLAG_CONTINUE
- KRB5_INT16_MAX
- KRB5_INT16_MIN
- KRB5_INT32_MAX
- KRB5_INT32_MIN
- KRB5_KEYUSAGE_AD_ITE
- KRB5_KEYUSAGE_AD_KDCISSUED_CKSUM
- KRB5_KEYUSAGE_AD_MTE
- KRB5_KEYUSAGE_AD_SIGNEDPATH
- KRB5_KEYUSAGE_APP_DATA_CKSUM
- KRB5_KEYUSAGE_APP_DATA_ENCRYPT
- KRB5_KEYUSAGE_AP_REP_ENCPART
- KRB5_KEYUSAGE_AP_REQ_AUTH
- KRB5_KEYUSAGE_AP_REQ_AUTH_CKSUM
- KRB5_KEYUSAGE_AS_REP_ENCPART
- KRB5_KEYUSAGE_AS_REQ
- KRB5_KEYUSAGE_AS_REQ_PA_ENC_TS
- KRB5_KEYUSAGE_ENC_CHALLENGE_CLIENT
- KRB5_KEYUSAGE_ENC_CHALLENGE_KDC
- KRB5_KEYUSAGE_FAST_ENC
- KRB5_KEYUSAGE_FAST_FINISHED
- KRB5_KEYUSAGE_FAST_REP
- KRB5_KEYUSAGE_FAST_REQ_CHKSUM
- KRB5_KEYUSAGE_GSS_TOK_MIC
- KRB5_KEYUSAGE_GSS_TOK_WRAP_INTEG
- KRB5_KEYUSAGE_GSS_TOK_WRAP_PRIV
- KRB5_KEYUSAGE_IAKERB_FINISHED
- KRB5_KEYUSAGE_KDC_REP_TICKET
- KRB5_KEYUSAGE_KRB_CRED_ENCPART
- KRB5_KEYUSAGE_KRB_ERROR_CKSUM
- KRB5_KEYUSAGE_KRB_PRIV_ENCPART
- KRB5_KEYUSAGE_KRB_SAFE_CKSUM
- KRB5_KEYUSAGE_PA_OTP_REQUEST
- KRB5_KEYUSAGE_PA_PKINIT_KX
- KRB5_KEYUSAGE_PA_REFERRAL
- KRB5_KEYUSAGE_PA_S4U_X509_USER_REPLY
- KRB5_KEYUSAGE_PA_S4U_X509_USER_REQUEST
- KRB5_KEYUSAGE_PA_SAM_CHALLENGE_CKSUM
- KRB5_KEYUSAGE_PA_SAM_CHALLENGE_TRACKID
- KRB5_KEYUSAGE_PA_SAM_RESPONSE
- KRB5_KEYUSAGE_TGS_REP_ENCPART_SESSKEY
- KRB5_KEYUSAGE_TGS_REP_ENCPART_SUBKEY
- KRB5_KEYUSAGE_TGS_REQ_AD_SESSKEY
- KRB5_KEYUSAGE_TGS_REQ_AD_SUBKEY
- KRB5_KEYUSAGE_TGS_REQ_AUTH
- KRB5_KEYUSAGE_TGS_REQ_AUTH_CKSUM
- KRB5_KPASSWD_ACCESSDENIED
- KRB5_KPASSWD_AUTHERROR
- KRB5_KPASSWD_BAD_VERSION
- KRB5_KPASSWD_HARDERROR
- KRB5_KPASSWD_INITIAL_FLAG_NEEDED
- KRB5_KPASSWD_MALFORMED
- KRB5_KPASSWD_SOFTERROR
- KRB5_KPASSWD_SUCCESS
- KRB5_LRQ_ALL_ACCT_EXPTIME
- KRB5_LRQ_ALL_LAST_INITIAL
- KRB5_LRQ_ALL_LAST_RENEWAL
- KRB5_LRQ_ALL_LAST_REQ
- KRB5_LRQ_ALL_LAST_TGT
- KRB5_LRQ_ALL_LAST_TGT_ISSUED
- KRB5_LRQ_ALL_PW_EXPTIME
- KRB5_LRQ_NONE
- KRB5_LRQ_ONE_ACCT_EXPTIME
- KRB5_LRQ_ONE_LAST_INITIAL
- KRB5_LRQ_ONE_LAST_RENEWAL
- KRB5_LRQ_ONE_LAST_REQ
- KRB5_LRQ_ONE_LAST_TGT
- KRB5_LRQ_ONE_LAST_TGT_ISSUED
- KRB5_LRQ_ONE_PW_EXPTIME
- KRB5_NT_ENTERPRISE_PRINCIPAL
- KRB5_NT_ENT_PRINCIPAL_AND_ID
- KRB5_NT_MS_PRINCIPAL
- KRB5_NT_MS_PRINCIPAL_AND_ID
- KRB5_NT_PRINCIPAL
- KRB5_NT_SMTP_NAME
- KRB5_NT_SRV_HST
- KRB5_NT_SRV_INST
- KRB5_NT_SRV_XHST
- KRB5_NT_UID
- KRB5_NT_UNKNOWN
- KRB5_NT_WELLKNOWN
- KRB5_NT_X500_PRINCIPAL
- KRB5_OLD_CRYPTO
- KRB5_PAC_CLIENT_INFO
- KRB5_PAC_CREDENTIALS_INFO
- KRB5_PAC_DELEGATION_INFO
- KRB5_PAC_LOGON_INFO
- KRB5_PAC_PRIVSVR_CHECKSUM
- KRB5_PAC_SERVER_CHECKSUM
- KRB5_PAC_UPN_DNS_INFO
- KRB5_PADATA_AFS3_SALT
- KRB5_PADATA_AP_REQ
- KRB5_PADATA_ENCRYPTED_CHALLENGE
- KRB5_PADATA_ENC_SANDIA_SECURID
- KRB5_PADATA_ENC_TIMESTAMP
- KRB5_PADATA_ENC_UNIX_TIME
- KRB5_PADATA_ETYPE_INFO
- KRB5_PADATA_ETYPE_INFO2
- KRB5_PADATA_FOR_USER
- KRB5_PADATA_FX_COOKIE
- KRB5_PADATA_FX_ERROR
- KRB5_PADATA_FX_FAST
- KRB5_PADATA_GET_FROM_TYPED_DATA
- KRB5_PADATA_NONE
- KRB5_PADATA_OSF_DCE
- KRB5_PADATA_OTP_CHALLENGE
- KRB5_PADATA_OTP_PIN_CHANGE
- KRB5_PADATA_OTP_REQUEST
- KRB5_PADATA_PAC_REQUEST
- KRB5_PADATA_PKINIT_KX
- KRB5_PADATA_PK_AS_REP
- KRB5_PADATA_PK_AS_REP_OLD
- KRB5_PADATA_PK_AS_REQ
- KRB5_PADATA_PK_AS_REQ_OLD
- KRB5_PADATA_PW_SALT
- KRB5_PADATA_REFERRAL
- KRB5_PADATA_S4U_X509_USER
- KRB5_PADATA_SAM_CHALLENGE
- KRB5_PADATA_SAM_CHALLENGE_2
- KRB5_PADATA_SAM_REDIRECT
- KRB5_PADATA_SAM_RESPONSE
- KRB5_PADATA_SAM_RESPONSE_2
- KRB5_PADATA_SESAME
- KRB5_PADATA_SVR_REFERRAL_INFO
- KRB5_PADATA_TGS_REQ
- KRB5_PADATA_USE_SPECIFIED_KVNO
- KRB5_PRINCIPAL_COMPARE_CASEFOLD
- KRB5_PRINCIPAL_COMPARE_ENTERPRISE
- KRB5_PRINCIPAL_COMPARE_IGNORE_REALM
- KRB5_PRINCIPAL_COMPARE_UTF8
- KRB5_PRINCIPAL_PARSE_ENTERPRISE
- KRB5_PRINCIPAL_PARSE_IGNORE_REALM
- KRB5_PRINCIPAL_PARSE_NO_REALM
- KRB5_PRINCIPAL_PARSE_REQUIRE_REALM
- KRB5_PRINCIPAL_UNPARSE_DISPLAY
- KRB5_PRINCIPAL_UNPARSE_NO_REALM
- KRB5_PRINCIPAL_UNPARSE_SHORT
- KRB5_PRIV
- KRB5_PROMPT_TYPE_NEW_PASSWORD
- KRB5_PROMPT_TYPE_NEW_PASSWORD_AGAIN
- KRB5_PROMPT_TYPE_PASSWORD
- KRB5_PROMPT_TYPE_PREAUTH
- KRB5_PVNO
- KRB5_REALM_BRANCH_CHAR
- KRB5_RECVAUTH_BADAUTHVERS
- KRB5_RECVAUTH_SKIP_VERSION
- KRB5_REFERRAL_REALM
- KRB5_RESPONDER_OTP_FLAGS_COLLECT_PIN
- KRB5_RESPONDER_OTP_FLAGS_COLLECT_TOKEN
- KRB5_RESPONDER_OTP_FLAGS_NEXTOTP
- KRB5_RESPONDER_OTP_FLAGS_SEPARATE_PIN
- KRB5_RESPONDER_OTP_FORMAT_ALPHANUMERIC
- KRB5_RESPONDER_OTP_FORMAT_DECIMAL
- KRB5_RESPONDER_OTP_FORMAT_HEXADECIMAL
- KRB5_RESPONDER_QUESTION_OTP
- KRB5_RESPONDER_QUESTION_PASSWORD
- KRB5_SAFE
- KRB5_SAM_MUST_PK_ENCRYPT_SAD
- KRB5_SAM_SEND_ENCRYPTED_SAD
- KRB5_SAM_USE_SAD_AS_KEY
- KRB5_TC_MATCH_2ND_TKT
- KRB5_TC_MATCH_AUTHDATA
- KRB5_TC_MATCH_FLAGS
- KRB5_TC_MATCH_FLAGS_EXACT
- KRB5_TC_MATCH_IS_SKEY
- KRB5_TC_MATCH_KTYPE
- KRB5_TC_MATCH_SRV_NAMEONLY
- KRB5_TC_MATCH_TIMES
- KRB5_TC_MATCH_TIMES_EXACT
- KRB5_TC_NOTICKET
- KRB5_TC_OPENCLOSE
- KRB5_TC_SUPPORTED_KTYPES
- KRB5_TGS_NAME
- KRB5_TGS_NAME_SIZE
- KRB5_TGS_REP
- KRB5_TGS_REQ
- KRB5_TKT_CREDS_STEP_FLAG_CONTINUE
- KRB5_VERIFY_INIT_CREDS_OPT_AP_REQ_NOFAIL
- KRB5_WELLKNOWN_NAMESTR
- LR_TYPE_INTERPRETATION_MASK
- LR_TYPE_THIS_SERVER_ONLY
- MAX_KEYTAB_NAME_LEN
- MSEC_DIRBIT
- MSEC_VAL_MASK
- SALT_TYPE_AFS_LENGTH
- SALT_TYPE_NO_LENGTH
- THREEPARAMOPEN
- TKT_FLG_ANONYMOUS
- TKT_FLG_ENC_PA_REP
- TKT_FLG_FORWARDABLE
- TKT_FLG_FORWARDED
- TKT_FLG_HW_AUTH
- TKT_FLG_INITIAL
- TKT_FLG_INVALID
- TKT_FLG_MAY_POSTDATE
- TKT_FLG_OK_AS_DELEGATE
- TKT_FLG_POSTDATED
- TKT_FLG_PRE_AUTH
- TKT_FLG_PROXIABLE
- TKT_FLG_PROXY
- TKT_FLG_RENEWABLE
- TKT_FLG_TRANSIT_POLICY_CHECKED
- VALID_INT_BITS
- VALID_UINT_BITS
- krb5_const
- krb5_princ_component
- krb5_princ_name
- krb5_princ_realm
- krb5_princ_set_realm
- krb5_princ_set_realm_data
- krb5_princ_set_realm_length
- krb5_princ_size
- krb5_princ_type
- krb5_roundup
- krb5_x
- krb5_xc
- krb524_convert_creds_kdc
- krb524_init_ets
- For plugin module developers
- Building Kerberos V5
- Kerberos V5 concepts
- MIT Kerberos Features
- About this project
- Resources