---
name: "Wallet::ACL::Krb5"
section: "3pm"
platform: "linux"
package: "krb5-wallet-server"
version: "1.7"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/Wallet::ACL::Krb5"
---

# Wallet::ACL::Krb5(3pm)

Simple wallet ACL verifier for Kerberos principals

## NAME

Wallet::ACL::Krb5 - Simple wallet ACL verifier for Kerberos principals

## SYNOPSIS

```
    my $verifier = Wallet::ACL::Krb5->new;
    my $status = $verifier->check ($principal, $acl);
    if (not defined $status) {
        die "Something failed: ", $verifier->error, "\n";
    } elsif ($status) {
        print "Access granted\n";
    } else {
        print "Access denied\n";
    }
```

## DESCRIPTION

Wallet::ACL::Krb5 is the simplest wallet ACL verifier, used to verify ACL lines of type `"krb5"`.  The value of such an ACL is a simple Kerberos principal in its text display form, and the ACL grants access to a given principal if and only if the principal exactly matches the ACL.

## METHODS

- **new()**

  Creates a new ACL verifier.  For this verifier, there is no setup work.

- check(PRINCIPAL, ACL)

  Returns true if PRINCIPAL matches ACL, false if not, and undef on an error (see "DIAGNOSTICS" below).

- **error()**

  Returns the error if **check()** returned undef.

## DIAGNOSTICS

- malformed krb5 ACL

  The ACL parameter to **check()** was malformed.  Currently, this error is only given if ACL is undefined or the empty string.

- no principal specified

  The PRINCIPAL parameter to **check()** was undefined or the empty string.

## SEE ALSO

**Wallet::ACL**(3), **Wallet::ACL::Base**(3), [**wallet-backend**(8)](/wallet-backend/8.md)

This module is part of the wallet system.  The current version is available from \<https://www.eyrie.org/~eagle/software/wallet/\>.

## AUTHOR

Russ Allbery \<eagle@eyrie.org\>