
KRB5_KUSEROK(3)            UNIX Programmer's Manual            KRB5_KUSEROK(3)

NNAAMMEE
     kkrrbb55__kkuusseerrookk - checks if a principal is permitted to login as a user

LLIIBBRRAARRYY
     Kerberos 5 Library (libkrb5, -lkrb5)

SSYYNNOOPPSSIISS
     _k_r_b_5___b_o_o_l_e_a_n
     kkrrbb55__kkuusseerrookk(_k_r_b_5___c_o_n_t_e_x_t _c_o_n_t_e_x_t, _k_r_b_5___p_r_i_n_c_i_p_a_l _p_r_i_n_c_i_p_a_l,
             _c_o_n_s_t _c_h_a_r _*_u_s_e_r)

DDEESSCCRRIIPPTTIIOONN
     This function takes the name of a local _u_s_e_r and checks if _p_r_i_n_c_i_p_a_l is
     allowed to log in as that user.

     The _u_s_e_r may have a _~_/_._k_5_l_o_g_i_n file listing principals that are allowed
     to login as that user. If that file does not exist, all principals with a
     first component identical to the username, and a realm considered local,
     are allowed access.

     The _._k_5_l_o_g_i_n file must contain one principal per line, be owned by _u_s_e_r,
     and not be writable by group or other (but must be readable by anyone).

     Note that if the file exists, no implicit access rights are given to
     _u_s_e_r@<localrealm>.

     Optionally, a set of files may be put in a directory), in which case they
     will all be checked in the same manner as The files may be called
     anything, but files starting with a hash _~_/_._k_5_l_o_g_i_n_._d (``'' or ending
     with a tilde ``(~'') are ignored. Subdirectories are not traversed. Note
     that this directory may not be checked by other implementations.

RREETTUURRNN VVAALLUUEESS
     kkrrbb55__kkuusseerrookk returns TRUE if access should be granted, FALSE otherwise.

HHIISSTTOORRYY
     The _~_/_._k_5_l_o_g_i_n_._d feature appeared in Heimdal 0.7.

SSEEEE AALLSSOO
     krb5_get_default_realms(3),  krb5_verify_user(3),
     krb5_verify_user_lrealm(3),  krb5_verify_user_opt(3),  krb5.conf(5)

 HEIMDAL                          May 4, 2005                                1
