---
name: "globus_gsi_gssapi_extensions"
section: "3"
platform: "linux"
package: "libglobus-gssapi-gsi-doc"
version: "14.20-3"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/globus_gsi_gssapi_extensions"
---

# globus\_gsi\_gssapi\_extensions(3)

GSSAPI Extensions - Extensions.

## NAME

globus\_gsi\_gssapi\_extensions - GSSAPI Extensions

 \- Extensions.

## SYNOPSIS

### Modules

**Buffer Set Utilities**\
 Buffer Set Utilities.  **Delegation**\
 Delegation Functions.

### Functions

OM\_uint32 GSS\_CALLCONV **gss\_export\_cred** (OM\_uint32 \*minor\_status, const gss\_cred\_id\_t cred\_handle, const gss\_OID desired\_mech, OM\_uint32 option\_req, gss\_buffer\_t export\_buffer)\
 Export a GSSAPI credential.  OM\_uint32 GSS\_CALLCONV **gss\_import\_cred** (OM\_uint32 \*minor\_status, gss\_cred\_id\_t \*output\_cred\_handle, const gss\_OID desired\_mech, OM\_uint32 option\_req, const gss\_buffer\_t import\_buffer, OM\_uint32 time\_req, OM\_uint32 \*time\_rec)\
 Import a credential.  OM\_uint32 GSS\_CALLCONV **gss\_inquire\_cred\_by\_oid** (OM\_uint32 \*minor\_status, const gss\_cred\_id\_t cred\_handle, const gss\_OID desired\_object, gss\_buffer\_set\_t \*data\_set)\
 Inquire Cred By OID.  OM\_uint32 GSS\_CALLCONV **gss\_inquire\_sec\_context\_by\_oid** (OM\_uint32 \*minor\_status, const gss\_ctx\_id\_t context\_handle, const gss\_OID desired\_object, gss\_buffer\_set\_t \*data\_set)\
 Inquire Sec Context by OID.  OM\_uint32 GSS\_CALLCONV **gss\_set\_sec\_context\_option** (OM\_uint32 \*minor\_status, gss\_ctx\_id\_t \*context\_handle, const gss\_OID option, const gss\_buffer\_t value)\
 Set Security Context Option.

## Detailed Description

Extensions.

Experimental GSSAPI routines are defined here. These may change, and we will be looking at adding these to Kerberos as mods, and submitting them to the IETF.

These extensions are more fully documented in `GSS-API Extensions`

## Function Documentation

### OM\_uint32 GSS\_CALLCONV gss\_export\_cred (OM\_uint32 \* minor\_status, const gss\_cred\_id\_t cred\_handle, const gss\_OID desired\_mech, OM\_uint32 option\_req, gss\_buffer\_t export\_buffer)

Export a GSSAPI credential. Saves the credential so it can be checkpointed and imported by gss\_import\_cred

**Parameters**

*minor\_status* \
 *cred\_handle* \
 *desired\_mech* Should either be gss\_mech\_globus\_gssapi\_openssl or NULL (in which case gss\_mech\_globus\_gssapi\_openssl is assumed). \
 *option\_req* \
 *export\_buffer*

**Returns**

### OM\_uint32 GSS\_CALLCONV gss\_import\_cred (OM\_uint32 \* minor\_status, gss\_cred\_id\_t \* output\_cred\_handle, const gss\_OID desired\_mech, OM\_uint32 option\_req, const gss\_buffer\_t import\_buffer, OM\_uint32 time\_req, OM\_uint32 \* time\_rec)

Import a credential. This function will import credentials exported by **gss\_export\_cred()**. It is intended to allow a multiple use application to checkpoint delegated credentials. \

**Parameters**

*minor\_status* The minor status returned by this function. This parameter will be 0 upon success. \
 *output\_cred\_handle* Upon success, this parameter will contain the imported credential. When no longer needed this credential should be freed using **gss\_release\_cred()**. \
 *desired\_mech* This parameter may be used to specify the desired security mechanism. May be GSS\_C\_NO\_OID. \
 *option\_req* This parameter indicates which option\_req value was used to produce the import\_buffer. \
 *import\_buffer* A buffer produced by gss\_export\_credential(). \
 *time\_req* The requested period of validity (seconds) for the imported credential. May be NULL. \
 *time\_rec* This parameter will contain the received period of validity of the imported credential upon success. May be NULL.

**Return values**

*GSS\_S\_COMPLETE* Success \
 *GSS\_S\_BAD\_MECH* Requested security mechanism is unavailable \
 *GSS\_S\_DEFECTIVE\_TOKEN* import\_buffer is defective \
 *GSS\_S\_FAILURE* General failure

### OM\_uint32 GSS\_CALLCONV gss\_inquire\_cred\_by\_oid (OM\_uint32 \* minor\_status, const gss\_cred\_id\_t cred\_handle, const gss\_OID desired\_object, gss\_buffer\_set\_t \* data\_set)

Inquire Cred By OID. NOTE: Checks both the cert in the credential and the certs in the cert chain for a valid extension that matches the desired OID. The first one found is used, starting with the endpoint cert, and then searching the cert chain.

**Parameters**

*minor\_status* \
 *cred\_handle* \
 *desired\_object* \
 *data\_set*

**Returns**

### OM\_uint32 GSS\_CALLCONV gss\_set\_sec\_context\_option (OM\_uint32 \* minor\_status, gss\_ctx\_id\_t \* context\_handle, const gss\_OID option, const gss\_buffer\_t value)

Set Security Context Option. GSSAPI routine to initiate the sending of a security context See: \<draft-ietf-cat-gssv2-cbind-04.txt\>

**Parameters**

*minor\_status* \
 *context\_handle* \
 *option* \
 *value*

**Returns**

## Author

Generated automatically by Doxygen for globus\_gssapi\_gsi from the source code.