---
name: "krb5_acl_match_string"
section: "3"
platform: "linux"
package: "heimdal-dev"
version: "7.8.git20221117.28daf24+dfsg-9+deb13u1"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/krb5_acl_match_string"
---

# krb5\_acl\_match\_string(3)

ACL matching functions

## NAME

**krb5\_acl\_match\_file**, **krb5\_acl\_match\_string** – ACL matching functions

## LIBRARY

Kerberos 5 Library (libkrb5, -lkrb5)

## SYNOPSIS

*krb5\_error\_code*\

**krb5\_acl\_match\_file**(*krb5\_context context*, *const char \*file*, *const char \*format*, *...*);

*krb5\_error\_code*\

**krb5\_acl\_match\_string**(*krb5\_context context*, *const char \*string*, *const char \*format*, *...*);

## DESCRIPTION

**krb5\_acl\_match\_file** matches ACL format against each line in a file. Lines starting with # are treated like comments and ignored.

**krb5\_acl\_match\_string** matches ACL format against a string.

The ACL format has three format specifiers: s, f, and r. Each specifier will retrieve one argument from the variable arguments for either matching or storing data. The input string is split up using " " and "\\t" as a delimiter; multiple " " and "\\t" in a row are considered to be the same.

- s

  Matches a string using [strcmp(3)](/strcmp/3.md) (case sensitive).

- f

  Matches the string with [fnmatch(3)](/fnmatch/3.md). The *flags* argument (the last argument) passed to the fnmatch function is 0.

- r

  Returns a copy of the string in the char \*\* passed in; the copy must be freed with [free(3)](/free/3.md). There is no need to [free(3)](/free/3.md) the string on error: the function will clean up and set the pointer to NULL.

All unknown format specifiers cause an error.

## EXAMPLES

```
char *s;
ret = krb5_acl_match_string(context, "foo", "s", "foo");
if (ret)
    krb5_errx(context, 1, "acl didn't match");
ret = krb5_acl_match_string(context, "foo foo baz/kaka",
    "ss", "foo", &s, "foo/*");
if (ret) {
    /* no need to free(s) on error */
    assert(s == NULL);
    krb5_errx(context, 1, "acl didn't match");
}
free(s);
```

## SEE ALSO

[krb5(3)](/krb5/3.md)