175 k5_profile_get_domain_realm(profile_t profile, char *realm, char ***domains,
178 	if (profile == NULL || realm == NULL || domains == NULL)
181 	return (k5_profile_iter_name_value(profile, "domain_realm", realm,
274  * errcode_t k5_profile_set_libdefaults(profile_t profile, char *realm)
277  * where realm is the realm name to be added as the default_realm
280 k5_profile_set_libdefaults(profile_t profile, char *realm)
285 	if (profile == NULL || realm == NULL)
297 	code = profile_add_relation(profile, hierarchy, realm);
303 k5_profile_set_kdc(profile_t profile, char *realm, char *kdc,
309 	if (profile == NULL || realm == NULL || kdc == NULL)
313 	hierarchy[1] = realm;
375  *	char *realm)
378  * where domain is the domain name of the associated realm name
379  * where realm is the corresponding realm name for the domain
382 k5_profile_add_domain_mapping(profile_t profile, char *domain, char *realm)
387 	if (profile == NULL || domain == NULL || realm == NULL)
399 	code = profile_add_relation(profile, hierarchy, realm);
405  * errcode_t k5_profile_remove_domain_mapping(profile_t profile, char *realm)
408  * where realm is the corresponding realm name for the domain
409  * Note: for the remove function, all matching domain - realm mappings
410  * will be removed for realm
413 k5_profile_remove_domain_mapping(profile_t profile, char *realm)
419 	if (profile == NULL || realm == NULL)
426 	code = k5_profile_get_domain_realm(profile, realm, &domains, B_FALSE);
444  * errcode_t k5_profile_get_realm_entry(profile_t profile, char *realm,
448  * where realm is the target realm for lookup
449  * where name is the name in the realm section requested
455 k5_profile_get_realm_entry(profile_t profile, char *realm, char *name,
461 	if (profile == NULL || realm == NULL || name == NULL ||
468 	hierarchy[1] = realm;
481  * errcode_t k5_profile_add_realm_entry(profile_t profile, char *realm,
485  * where realm is the target realm for the name-value pair
486  * where name is the name in the realm subsection to add
489  * Note: if the realm subsection does no exist then an error is returned
494 k5_profile_add_realm_entry(profile_t profile, char *realm, char *name,
501 	if (profile == NULL || realm == NULL || name == NULL || values == NULL)
505 	hierarchy[1] = realm;
527  * errcode_t k5_profile_get_default_realm(profile_t profile, char **realm)
529  * where realm is the default_realm configured for the system
531  * realm.
534 k5_profile_get_default_realm(profile_t profile, char **realm)
538 	if (profile == NULL || realm == NULL)
541 	*realm = NULL;
544 	    realm);
556  * where realms is a string array of realm names currently configured.
574  * errcode_t k5_profile_add_realm(profile_t profile, char *realm,
579  * where realm is the realm name associated with the configuration
587  * where default_realm, if set, will assign the realm to default_realm
592 k5_profile_add_realm(profile_t profile, char *realm, char *master, char **kdcs,
600 	if (profile == NULL || realm == NULL)
604 	 * Sets the default realm to realm if default_realm flag is set.
607 		if (code = k5_profile_set_libdefaults(profile, realm))
612 	hierarchy[1] = realm;
642 			if (code = k5_profile_set_kdc(profile, realm, *tkdcs, ow))
658  * errcode_t k5_profile_remove_xrealm_mapping(profile_t profile, char *realm)
661  * where source is the source realm for the capath
662  * where target is the target realm for the capath
663  * where inter is the intermediate realm between the source and target
664  * realms.  If the source and target share x-realm keys then this set to "."
666  * intermediate entries will be removed matching the realm name
669 k5_profile_remove_xrealm_mapping(profile_t profile, char *realm)
677 	if (profile == NULL || realm == NULL)
681 	hierarchy[1] = realm;
704 					if (strcmp(realm, target) == 0 ||
705 					    strcmp(realm, inter) == 0) {
755  * errcode_t k5_profile_remove_realm(profile_t profile, char *realm)
758  * where realm is the target realm for removal
759  * Note: the function removes the matching realm in the realms section,
760  * the default_realm, relevant domain_realm mappings with the realm name,
761  * and matching capaths source realm subsection.
764 k5_profile_remove_realm(profile_t profile, char *realm)
770 	if (profile == NULL || realm == NULL)
774 	 * Remove the default realm.
782 	 * we are performing a best effort on removing as much realm information
787 		if (strcmp(drealm, realm) == 0) {
798 	hierarchy[1] = realm;
803 	(void) k5_profile_remove_domain_mapping(profile, realm);
805 	(void) k5_profile_remove_xrealm_mapping(profile, realm);
808 	 * Not fatal even if realm wasn't available to remove.
818  * where source is the source realm for the capath
819  * where target is the target realm for the capath
820  * where inter is the intermediate realm between the source and target
821  * realms.  If the source and target share x-realm keys then this set to "."
851  * errcode_t k5_profile_validate(profile_t profile, char *realm, int *val_err,
855  * where realm is the realm name (case sensitive) to be inspected.
859  *	    (val returns realm validated)
861  *	    default realm only differs in case from the realm specified
862  *	    (val returns default realm configured)
864  *	    realm in realms section differs in case from the realm specified
865  *	    (val returns realm configured)
867  *	    default realm is not found in realms section
868  *	    (val returns realm not found)
870  *	    default realm does not exist
871  *	    (val returns realm specified)
873  *	    no realm found in realms section
874  *	    (val returns realm specified)
876  *	    no domain realm mapping entry found from the realm specified
877  *	    (val returns realm specified)
879  *	    kdc relation-value does not exist for specified realm
880  *	    (val returns realm specified)
882  *	    admin_server relation-value does not exist for specified realm
883  *	    (val returns realm specified)
885  *	    the realm name argument differs in case from the realm name argument
886  *	    for a domain-realm mapping entry
889  *	    realm name specified is not found in realms section
890  *	    (val returns the realm specified)
900  *	2. all relations are defined between default realm, realm, and
901  *		domain - realm mappings
912 k5_profile_validate(profile_t profile, char *realm, int *val_err, char **val,
920 	if (profile == NULL || realm == NULL || val_err == NULL || val == NULL)
929 			if (strcmp(realm, *trealms) != 0) {
930 				if (strcasecmp(realm, *trealms) == 0) {
944 		if ((*val = strdup(realm)) == NULL)
952 		if ((*val = strdup(realm)) == NULL)
978 			if ((*val = strdup(realm)) == NULL)
994 			if ((*val = strdup(realm)) == NULL)
1009 			if ((*val = strdup(realm)) == NULL)
1018 		if (strcasecmp(default_realm, realm) == 0) {
1019 			if (strcmp(default_realm, realm) != 0) {
1028 		if ((*val = strdup(realm)) == NULL)
1048 	if ((*val = strdup(realm)) == NULL)
1165 		m = _("realm in [realms] section should be in upper-case");
1178 		    "section for the specified realm");
1181 		m = _("no kdc entries found for the specified realm");
1184 		m = _("no admin_server entry found for the specified realm");
1188 		    "the specified realm should be in upper-case");
1191 		m = _("specified realm not found in [realms] section");

Indexes created Tue Jul 24 14:28:13 CEST 2018