NAME

sec_cred_get_initiator- Returns the privilege attributes of the initiator of a delegation chain

SYNOPSIS

#include <dce/sec_cred.h>

sec_cred_pa_handle_t sec_cred_get_initiator (
    rpc_authz_cred_handle_t callers_identity,
    error_status_t *status );

PARAMETERS

Input

callers_identity

A credential handle of type rpc_authz_cred_handle_t. This handle is supplied as output of the rpc_binding_inq_auth_caller() call.

Output

status

A pointer to the completion status. On successful completion, status is assigned error_status_ok.

DESCRIPTION

The sec_cred_get_initiator() routine returns a handle to the the privilege attributes of the initiator of a delegation chain that performed an authenticated RPC operation.

The credential handle identified by callers_identity contains authentication and authorization information for all delegates in the chain. This call returns a handle (sec_cred_pa_handle_t) to the privilege attributes of the client that initiated the delegation chain. The sec_cred_pa_handle_t returned by this call is used in other sec_cred_get_*() calls to obtain privilege attribute information for the initiator.

Before you execute sec_cred_get_initiator(), you must execute an rpc_binding_inq_auth_caller() call to obtain an rpc_authz_cred_handle_t for the callers_identity argument.

FILES

/usr/include/dce/sec_cred.idl

The idl file from which dce/sec_cred.h was derived.

ERRORS

sec_cred_s_invalid_auth_handle

error_status_ok

SEE ALSO

Functions: rpc_binding_inq_auth_caller(), sec_cred_get_deleg_restrictions(), sec_cred_get_delegation_type(), sec_cred_get_extended_attrs(), sec_cred_get_opt_restrictions(), sec_cred_get_pa_date(), sec_cred_get_req_restrictions(), sec_cred_get_tgt_restrictions(), sec_cred_get_v1_pac().