---
name: "sasl_authorize_t"
section: "3"
platform: "macos"
package: "passwordserver_sasl"
version: "215"
release: "macOS 26.5"
platforms: ["linux", "macos"]
url: "https://new.carta.tech/sasl_authorize_t"
---

# sasl\_authorize\_t(3)

The SASL authorization callback

## NAME

sasl\_authorize\_t - The SASL authorization callback

## SYNOPSIS

```
#include <sasl/sasl.h>

int sasl_authorize_t(void *context,
		          const char *requested_user, unsigned alen,
		          const char *auth_identity, unsigned alen,
		          const char *def_realm, unsigned urlen,
		          struct propctx *propctx)
```

## DESCRIPTION

**sasl\_authorize\_t** is used to check whether the authorized user *auth\_identity* may act as the user *requested\_user.* For example the user root may wish to authenticate with his credentials but act as the user tmartin (with all of tmartin's rights not roots). A server application should be very careful, and probably err on the side of caution, when determining which users may proxy as whom.

## RETURN VALUE

SASL callback functions should return SASL return codes. See sasl.h for a complete list. SASL\_OK indicates success.

## SEE ALSO

[sasl(3)](/sasl/3.md), [sasl\_callbacks(3)](/sasl_callbacks/3.md)