KRB5_VERIFY_USER(3)

NAME
krb5_verify_user, krb5_verify_user_lrealm - Heimdal password verifying functions

LIBRARY
Kerberos 5 Library (libkrb5, -lkrb5)

SYNOPSIS
#include <krb5.h>
krb5_error_code
krb5_verify_user(krb5_context context, krb5_principal principal, krb5_ccache ccache, const char *password, krb5_boolean secure, const char *service);
krb5_error_code
krb5_verify_user_lrealm(krb5_context context, krb5_principal principal, krb5_ccache ccache, const char *password, krb5_boolean secure, const char *service);

DESCRIPTION
The krb5_verify_user function verifies the password supplied by a user. The principal whose password will be verified is specified in principal. New tickets will be obtained as a side-effect and stored in ccache (if NULL, the default ccache is used). If the password is not supplied in password (and is given as NULL) the user will be prompted for it. If secure the ticket will be verified against the locally stored service key service (by default ‘host’ if given as NULL ).

The krb5_verify_user_lrealm function does the same, except that it ignores the realm in principal and tries all the local realms (see krb5.conf(5)). After a successful return, the principal is set to the authenticated realm. If the call fails, the principal will not be meaningful, and should only be freed with krb5_free_principal(3).

EXAMPLE
Here is a example program that verifies a password. it uses the ‘host/`hostname`’ service principal in krb5.keytab.

    #include <krb5.h>
    int
    main(int argc, char **argv)
    {
        char *user;
        krb5_error_code error;
        krb5_principal princ;
        krb5_context context;
        if (argc != 2)
    	errx(1, "usage: verify_passwd <principal-name>");
        user = argv[1];
        if (krb5_init_context(&context) < 0)
    	errx(1, "krb5_init_context");
        if ((error = krb5_parse_name(context, user, &princ)) != 0)
    	krb5_err(context, 1, error, "krb5_parse_name");
        error = krb5_verify_user(context, princ, NULL, NULL, TRUE, NULL);
        if (error)
            krb5_err(context, 1, error, "krb5_verify_user");
        return 0;
    }

SEE ALSO
krb5_err(3), krb5_free_principal(3), krb5_init_context(3), krb5_kt_default(3), krb5.conf(5)