---
name: "krb524_convert_creds_kdc"
section: "3"
platform: "linux"
package: "heimdal-dev"
version: "7.8.git20221117.28daf24+dfsg-9+deb13u1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/krb524_convert_creds_kdc"
---

# krb524\_convert\_creds\_kdc(3)

converts Kerberos 5 credentials to Kerberos 4 credentials

## NAME

**krb524\_convert\_creds\_kdc**, **krb524\_convert\_creds\_kdc\_ccache** – converts Kerberos 5 credentials to Kerberos 4 credentials

## LIBRARY

Kerberos 5 Library (libkrb5, -lkrb5)

## SYNOPSIS

**#include \<krb5.h\>**

*krb5\_error\_code*\

**krb524\_convert\_creds\_kdc**(*krb5\_context context*, *krb5\_creds \*in\_cred*, *struct credentials \*v4creds*);

*krb5\_error\_code*\

**krb524\_convert\_creds\_kdc\_ccache**(*krb5\_context context*, *krb5\_ccache ccache*, *krb5\_creds \*in\_cred*, *struct credentials \*v4creds*);

## DESCRIPTION

Convert the Kerberos 5 credential to Kerberos 4 credential. This is done by sending them to the 524 service in the KDC.

**krb524\_convert\_creds\_kdc**() converts the Kerberos 5 credential in *in\_cred* to Kerberos 4 credential that is stored in *credentials*.

**krb524\_convert\_creds\_kdc\_ccache**() is different from **krb524\_convert\_creds\_kdc**() in that way that if *in\_cred* doesn't contain a DES session key, then a new one is fetched from the KDC and stored in the cred cache *ccache*, and then the KDC is queried to convert the credential.

This interfaces are used to make the migration to Kerberos 5 from Kerberos 4 easier. There are few services that still need Kerberos 4, and this is mainly for compatibility for those services. Some services, like AFS, really have Kerberos 5 supports, but still uses the 524 interface to make the migration easier.

## SEE ALSO

[krb5(3)](/krb5/3.md), [krb5.conf(5)](/krb5.conf/5.md)