
KRB5_ANAME_TO_LOCALNAME(3) UNIX Programmer's Manual KRB5_ANAME_TO_LOCALNAME(3)

NNAAMMEE
     kkrrbb55__aannaammee__ttoo__llooccaallnnaammee - converts a principal to a system local name

LLIIBBRRAARRYY
     Kerberos 5 Library (libkrb5, -lkrb5)

SSYYNNOOPPSSIISS
     _k_r_b_5___b_o_o_l_e_a_n
     kkrrbb55__aannaammee__ttoo__llooccaallnnaammee(_k_r_b_5___c_o_n_t_e_x_t _c_o_n_t_e_x_t, _k_r_b_5___c_o_n_s_t___p_r_i_n_c_i_p_a_l _n_a_m_e,
             _s_i_z_e___t _l_n_s_i_z_e, _c_h_a_r _*_l_n_a_m_e)

DDEESSCCRRIIPPTTIIOONN
     This function takes a principal _n_a_m_e, verifies its in the local realm
     (using kkrrbb55__ggeett__ddeeffaauulltt__rreeaallmmss()) and then returns the local name of the
     principal.

     If _n_a_m_e isn't in one of the local realms an error is returned.

     If the size (_l_n_s_i_z_e) of the local name (_l_n_a_m_e) is to small, an error is
     returned.

     kkrrbb55__aannaammee__ttoo__llooccaallnnaammee() should only be use by application that imple-
     ments protocols that doesn't transport the login name and thus needs to
     convert a principal to a local name.

     Protocols should be designed so that the it autheticates using Kerberos,
     send over the login name and then verifies in the principal that authen-
     ticated is allowed to login and the login name.  A way to check if a user
     is allowed to login is using the function kkrrbb55__kkuusseerrookk().

SSEEEE AALLSSOO
     krb5_get_default_realms(3),  krb5_kuserok(3)

 HEIMDAL                        April 24, 2005                               1
