DCE 1.1: Authentication and Security Services
Copyright © 1997 The Open Group

---

CAE Specification
DCE 1.1: Authentication and Security Services
Document Number: C311

• Frontmatter
  • Preface
    • The Open Group
    • The Development of Product Standards
    • Open Group Publications
    • Versions and Issues of Specifications
    • Corrigenda
    • Ordering Information
    • This Document
    • Intended Audience
    • Typographic Conventions
  • Trademarks
  • Referenced Documents
• Part 1
  • Introduction
• Introduction to Security Services
  • Generalities on Security-The Architecture of Trust
    • Security Attributes: Authenticity, Integrity, Confidentiality
    • Policy versus Service versus Mechanism
    • Subjects and Objects, Privilege and Authorisation
    • Knowledge versus Belief; Trust
    • Untrusted Environments: A Priori Trust and Trust Chains
    • Distributed Security: Secrets and Cryptology
    • Encoding/Decoding and Encryption/Decryption of Messages
    • Key-based Security: Kerckhoffs' Doctrine
    • Outline of the Remainder of this Chapter, and of this Specification
  • DCE Security Model
  • Message Digests 4 and 5 (MD4, MD5)
  • Data Encryption Standard (DES)
  • Kerberos Key Distribution (Authentication) Service (KDS)
  • Privilege (Authorisation) Service (PS)
    • Name-based versus PAC-based Authorisation
  • Cells-Cross-cell Authentication and Authorisation
    • The Complete Cross-cell Scenario
    • Multi-Hop Trust Chains
  • Access Control Lists (ACLs)
    • ACL Entries and their Types
    • Object Types, ACL Types, and ACL Inheritance
  • ACL Managers, Permissions, Access Determination Algorithms
    • The Common Access Determination Algorithm for Delegation
      • Common ACL Manager Algorithm
      • Delegation Common ACL Manager Algorithm
      • Notes on Common ACL Manager ACLs
    • Multiple ACLs and ACL Managers
  • Protected RPC
  • ACL Editors
  • Registration Service (RS) and RS Editors
    • ACL Manager Types Supported by the RS
    • RS Binding; rs_bind Interface and sec_rgy_bind API
    • Policy Item, Policies and Properties; rs_policy RPC Interface
    • PGO Items; rs_pgo RPC Interface
    • Accounts; rs_acct RPC interface
    • Miscellaneous; rs_misc RPC Interface
  • ID Map Facility
  • Key Management Facility
  • Login Facility and Security Client Daemon (SCD)
    • Delegation-Related Functions
    • Further Discussion of Certification
  • Integration with Time Services
  • Integration with RPC Services
  • Integration with Naming Services
    • RPC Binding Models
      • Binding to TCB Servers
      • Binding to ACL Servers
  • DCE Delegation Model
    • Overview of Delegation Model
  • Components of Delegation Model
    • The Extended PAC (EPAC)
      • Linking EPAC Sets to Tickets
    • Transmitting and Receiving EPACs
    • Extended Privilege Attribute Facility
    • EPAC Accessor Function API
    • RPC Authorisation Extension
    • Enabling and Disabling Delegation
    • Delegation Controls
      • Anonymous Identity
      • Delegation Tokens
    • Remote Interfaces
    • Extensions to ACLs
    • User Interfaces
  • Extended Registry Attribute Facility
    • Attribute Schema
    • Access Control for the xattrschema Object
    • Schema Entries
      • Attribute Type Flags
    • The use_defaults Algorithm
    • The intercell_action Algorithm
    • Attribute Scope
    • Attribute Encodings
    • Attribute Triggers
      • Attribute Trigger Facility
      • Trigger Binding
      • Query Triggers
      • Update Triggers
    • Attribute Sets
    • Access Control for Attribute Types
      • Additional Attribute Permission Bits
    • Access Control on Attributes with Triggers
    • Well-Known Attribute Types
      • Unknown Intercell Action Attribute
  • Extended Login and Password Management Overview
    • Pre-Authentication
      • Login Denial
    • Server
      • Client
    • Password Management
  • Pre-Authentication and Obtaining a TGT
    • The Timestamps (AS + TGS) Protocol
    • The Third-Party (AS + TGS) Protocol
      • Client Side
      • Signature of padata Field
      • Server Side
    • Third-Party Pre-Authentication Protocol
    • Environmental Parameters and Registry Attributes
    • Password Management
      • Password Expiration
    • Schemas for Well-Known Attributes
      • disable_time_interval ERA
      • max_invalid_attempts ERA
      • minimum_password_cycle_time ERA
      • passwords_per_cycle ERA
      • pwd_val_type ERA
      • password_generation ERA
      • pwd_mgmt_binding ERA
      • pre_auth_req ERA
      • passwd_override ERA
      • login_set ERA
      • environment_set ERA
• Part 2
  • Security Services and Protocols
• Checksum Mechanisms
  • Terminology, Notation, and Conventions
    • Use of Pseudocode
    • Sequences
    • Bits, Bytes, Words, and so on
    • Integer Representations (Endianness)
      • Mapping Bit-Sequences to Integers
      • Mapping Byte-Sequences to Integers
      • Mapping Mixed Bit/Byte-Sequences to Integers
    • Modular Arithmetic
    • Bitwise Operations and Rotations
    • (IDL/NDR) Pickles
  • CRC-32
    • Cyclic Redundancy Checksums
      • Registered CRCs
  • MD4
    • Some Special Functions
    • Append Padding Bits
    • Append Length
    • Initialise State Buffer and Trigonometric Vector
    • Compress Message in 16-Word Chunks
    • Output
  • MD5
    • Some Special Functions
    • Append Padding Bits
    • Append Length
    • Initialise State Buffer and Trigonometric Vector
    • Compress Message in 16-Word Chunks
    • Output
• Encryption/Decryption Mechanisms
  • Basic DES
  • CBC Mode
  • DES-CBC Checksum
    • Composition Laws (Chaining Properties)
  • Keys to be Avoided
    • Weak Keys
    • Semi-Weak Keys
    • Possibly Weak Keys
  • Details of Basic DES Algorithm
    • Initial Permutation (IP) and Final Permutation (FP)
    • Key Schedule (KS): Permuted Choices (PC1, PC2) and Left Shift (LS)
    • Rounds (T): Cipher Function (F), Expansion (E), Permutation (P) and Selection/Substitution (S)
    • DES Decryption
  • Details of CBC Mode Algorithm
• Key Distribution (Authentication) Services
  • Fundamental Concepts
    • The krb5rpc RPC Interface
    • AS and TGS Services
    • Tickets, Keys, and Cross-Registration
  • Some Basic Data Types
    • Protocol Version Numbers
      • Registered Protocol Version Numbers
    • Protocol Message Types
      • Registered Protocol Message Types
    • Timestamps, Microseconds, and Clock Skew
      • Maximum Allowable Clock Skew
    • Cell Names
      • Registered Syntaxes for Cell Names
    • Transit Paths
      • Registered Transit Path Types
    • RS Names
      • Registered RS Name Types
    • Principal Names
    • Host Addresses
      • Registered Host Address Types
    • Sequence Numbers
    • Last Requests
      • Registered Last Request Types
    • Error Status Codes/Text/Data
      • Registered Error Status Codes/Text/Data
  • Cryptography- and Security-Related Data Types
    • Nonces
    • Random Numbers
    • Encryption Keys
      • Registered Encryption Key Types
    • Checksums
      • Registered Checksum Types
    • Encrypted Data
      • Registered Encryption Types
    • Passwords
      • Registered Password-to-Key Mappings
      • Minimum Implementation Requirements
    • Authentication Data
      • Registered Authentication Data Types
    • Authorisation Data
      • Registered Authorisation Data Types
  • Tickets
    • Part of Ticket to be Encrypted
    • Ticket Flags
  • Authenticators
  • Authentication Headers
    • Authentication Header Flags
    • The use-session-key Option
  • Reverse-Authentication Headers
    • Part of Reverse-authentication Header to be Encrypted
  • KDS (AS and TGS) Requests
    • KDS Request Body
    • KDS Request Flags
  • KDS (AS and TGS) Responses
    • Part of KDS Response to be Encrypted
  • KDS Errors
  • RS Information
  • AS Request/Response Processing
    • Client Sends AS Request to KDS
    • KDS Server Receives AS Request and Sends AS Response
    • Client Receives AS Response
  • (Reverse-)Authentication Header Processing
    • Client Sends Authentication Header
    • Server Receives Authentication Header and Sends Reverse-Authentication Header
    • Client Receives Reverse-Authentication Header
  • TGS Request/Response Processing
    • Client Sends TGS Request
    • KDS Server Receives TGS Request and Sends TGS Response
    • Client Receives TGS Response
  • KDS Error Processing
  • Cross-Cell Authentication
• Privilege (Authorisation) Services
  • PAC-Based Privilege Service (PS)
    • The rpriv RPC Interface
      • ps_message_t
      • ps_attr_request_t
      • ps_attr_result_t
      • ps_app_tkt_result_t
      • ps_request_ptgt
      • ps_request_become_delegate
      • ps_request_become_impersonator
      • ps_request_eptgt
    • Registered Authentication Services
    • Registered Authorisation Services
    • Status Codes
    • Status Code Origination
    • PTGS Service
    • Privilege-Tickets
  • Data Types
    • Authorisation Identities
      • Security-Version (Version 2) UUIDs
    • Local and Foreign Authorisation Identities
    • Groups Associated With a Foreign Cell
    • PAC Formats
    • Privilege Attribute Certificates (PACs)
    • Pickled PACs
    • Privilege-Tickets
    • Privilege Authentication Headers
    • Privilege Reverse-Authentication Headers
    • PTGS Requests
    • PTGS Responses
    • PS Errors
    • Extended PAC (EPAC) Interface
      • Optional and Required Restrictions
      • Entry Types for Delegate and Target Restrictions
      • Delegate and Target Restriction Types
      • Set of Delegation and Target Restrictions
      • Delegation Compatibility Modes
      • Supported Delegation Types
      • Supported Seal Types
      • EPAC Seal
      • Privilege Attributes for the EPAC
      • Handle for Privilege Attribute Data
      • Cursor for Delegate Iteration
      • Cursor for Extended Attributee Iteration
      • Extended PAC Data
      • List of Seals
      • Extended PAC (EPAC)
      • Set of Extended PACs (EPACs)
    • The sec_cred API for Abstracting EPAC Contents
      • Anonymous Identity
    • Delegation Token (Version 0) Format
      • Version 0 Token Flags
    • Delegation Token
    • Delegation Token Set
  • RS Information
  • PTGS Request/Response Processing
    • Client Sends PTGS Request
    • PS Server Receives PTGS Request and Sends PTGS Response
    • Client Receives PTGS Response
  • Privilege (Reverse-)Authentication Header Processing
    • Client Sends Privilege Authentication Header
    • Server Receives Privilege Authentication Header and Sends Privilege Reverse-Authentication Header
    • Client Receives Privilege Reverse-Authentication Header
  • TGS Request/Response Processing (By KDS)
  • PS Error Processing
  • Cross-cell Authorisation-Vetting the Privilege-ticket-granting-ticket
  • Name-Based Authorisation
• DCE Security Replication and Propagation
  • Replication Overview
  • The Master Replica
    • Propagation Queue
    • Replica List
      • Replica List Entries
  • Replica Information
    • Replica State
  • Slave Replica
    • Creating a Replica
    • Delete A Replica
  • Master Change
  • Authentication between Replicas
  • Name Service Registration
    • Sample Cell Profile Entries
  • Locate a Security Server
  • Registry Database Encryption
• Access Control Lists (ACLs)
  • Data Types
    • Interface UUID for ACLs
    • ACLE Types
    • ACLE Permission Sets
    • Extended ACLE Information
    • ACLEs
    • ACLs
    • ACL Types
  • Common ACLs
• ACL Managers
  • Data Types
    • Common Permissions
    • Printstrings and Helpstrings
      • Common Printstrings
      • Common Helpstrings
  • Common Access Determination Algorithm
    • First Step: Reduction
    • Second Step: Matching
      • Combined First and Second Steps
    • Third Step: Subalgorithms
    • Non-Intermediary Subalgorithms
      • USER_OBJ Subalgorithm
      • USER/FOREIGN_USER Subalgorithm
      • GROUP_OBJ/GROUP/FOREIGN_GROUP Subalgorithm
      • OTHER_OBJ Subalgorithm
      • FOREIGN_OTHER Subalgorithm
      • ANY_OTHER Subalgorithm
    • Intermediary Subalgorithms
      • USER_OBJ_DEL Subalgorithm
      • USER_DEL/FOREIGN_USER_DEL Subalgorithm
      • GROUP_OBJ_DEL/GROUP_DEL/FOREIGN_GROUP_DEL Subalgorithm
      • OTHER_OBJ_DEL Subalgorithm
      • FOREIGN_OTHER_DEL Subalgorithm
      • ANY_OTHER_DEL Subalgorithm
• Protected RPC
  • What is Specified in this Chapter
  • Security in the CL RPC Protocol
    • CL Establishment of Credentials (Conversation Manager)
      • Conversation Manager in_data
      • Conversation Manager out_data
    • CL Integrity and Confidentiality (PDU Verifiers and Bodies)
      • CL dce_c_authn_level_pkt
      • CL dce_c_authn_level_integrity
      • CL dce_c_authn_level_privacy
  • Security in the CO RPC Protocol
    • CO Establishment of Credentials (bind, bind_ack, alter_context, alter_context_response)
      • CO Verifier auth_value.assoc_uuid_crc
      • CO Verifier auth_value.checksum
      • CO Verifier auth_value.credentials
    • CO Integrity and Confidentiality (PDU Verifiers and Bodies)
      • CO dce_c_authn_level_pkt
      • CO dce_c_authn_level_pkt_integrity
      • CO dce_c_authn_level_pkt_privacy
• ACL Editor RPC Interface
  • The rdacl RPC Interface
    • Identifying Protected Objects and ACLs
    • Common Data Types and Constants for rdacl Interface
      • sec_acl_component_name_t
      • sec_acl_p_t
      • sec_acl_list_t
      • sec_acl_result_t
      • sec_acl_twr_ref_t
      • sec_acl_tower_set_t
      • sec_acl_posix_semantics_t
      • Status Codes
    • Interface UUID and Version Number for rdacl Interface
      • Implementation Variability Regarding Required Rights
    • rdacl_lookup()
    • rdacl_replace()
    • rdacl_get_access()
    • rdacl_test_access()
    • rdacl_place_holder_1()
    • rdacl_get_manager_types()
    • rdacl_get_printstring()
    • rdacl_get_referral()
    • rdacl_get_mgr_types_semantics()
• RS Editor RPC Interfaces
  • RS Protected Objects and their ACL Manager Types
    • Supported Permissions
  • Common Data Types and Constants for RS Editors
    • bitset
    • sec_timeval_sec_t
    • sec_timeval_t
    • sec_rgy_name_t-Short and Long PGO Names
    • sec_rgy_pname_t
    • sec_rgy_login_name_t
    • sec_rgy_cursor_t
    • rs_cache_data_t
    • sec_rgy_handle_t
  • The rs_bind RPC Interface
    • Common Data Types and Constants for rs_bind
      • rs_replica_name_p_t
      • rs_replica_twr_vec_p_t
    • Interface UUID and Version Number for rs_bind
    • rs_bind_get_update_site()
  • The rs_policy RPC Interface
    • Common Data Types and Constants for rs_policy
      • sec_timeval_period_t
      • sec_rgy_properties_flags_t
      • sec_rgy_properties_t
      • sec_rgy_plcy_pwd_flags_t
      • sec_rgy_plcy_t
      • sec_rgy_plcy_auth_t
      • Status Codes
    • Interface UUID and Version Number for rs_policy
    • rs_properties_get_info()
    • rs_properties_set_info()
    • rs_policy_get_info()
    • rs_policy_set_info()
    • rs_policy_get_effective()
    • rs_auth_policy_get_info()
    • rs_auth_policy_get_effective()
    • rs_auth_policy_set_info()
  • The rs_pgo RPC Interface
    • Common Data Types and Constants for rs_pgo
      • sec_rgy_domain_t
      • sec_rgy_member_t
      • sec_rgy_pgo_flags_t
      • sec_rgy_pgo_item_t
      • rs_pgo_id_key_t
      • rs_pgo_unix_num_key_t
      • rs_pgo_query_t
      • rs_pgo_query_key_t
      • rs_pgo_result_t
      • rs_pgo_query_result_t
    • Interface UUID and Version Number for rs_pgo
    • rs_pgo_add()
    • rs_pgo_delete()
    • rs_pgo_replace()
    • rs_pgo_rename()
    • rs_pgo_get()
    • rs_pgo_key_transfer()
    • rs_pgo_add_member()
    • rs_pgo_delete_member()
    • rs_pgo_is_member()
    • rs_pgo_get_members()
  • The rs_acct RPC Interface
    • Common Data Types and Constants for rs_acct
      • sec_rgy_acct_key_t
      • sec_rgy_acct_admin_flags_t
      • sec_rgy_acct_auth_flags_t
      • sec_rgy_foreign_id_t
      • sec_rgy_acct_admin_t
      • sec_rgy_acct_user_flags_t
      • sec_passwd_type_t
      • sec_key_version_t
      • sec_passwd_version_t
      • sec_passwd_des_key_t
      • sec_passwd_rec_t
      • sec_chksum_type_t
      • sec_chksum_t
      • sec_rgy_unix_passwd_buf_t
      • sec_rgy_acct_user_t
      • rs_acct_parts_t
      • rs_encrypted_pickle_t
      • sec_etype_t
      • sec_bytes_t
      • sec_encrypted_bytes_t
      • rs_acct_key_transmit_t
      • sec_rgy_sid_t
      • sec_rgy_unix_sid_t
      • rs_acct_info_t
    • Interface UUID and Version Number for rs_acct
    • rs_acct_add()
    • rs_acct_delete()
    • rs_acct_rename()
    • rs_acct_lookup()
    • rs_acct_replace()
    • rs_acct_get_projlist()
  • The rs_misc RPC Interface
    • Common Data Types and Constants for rs_misc
      • rs_login_info_t
      • rs_update_seqno_t
    • Interface UUID and Version Number for rs_misc
    • rs_login_get_info()
    • rs_wait_until_consistent()
    • rs_check_consistency()
  • The rs_attr RPC Interface
    • Common Data Types and Constants for rs_attr
      • sec_attr_component_name_t
      • rs_attr_cursor_t
      • sec_attr_bind_auth_info_type_t
      • sec_attr_bind_auth_info_t
      • sec_attr_bind_type_t
      • sec_attr_twr_ref_t
      • sec_attr_twr_set_t
      • sec_attr_bind_svrname
      • sec_attr_binding_t
      • sec_attr_bind_info_t
      • sec_attr_enc_printstring_p_t
      • sec_attr_enc_str_array_t
      • sec_attr_enc_bytes_t
      • sec_attr_i18n_data_t
      • sec_attr_enc_attr_set_t
      • sec_attr_encoding_t
      • sec_attr_value_t
      • sec_attr_t
      • sec_attr_vec_t
    • Interface UUID for rs_attr
    • rs_attr_cursor_init()
    • rs_attr_lookup_by_id()
    • rs_attr_lookup_no_expand()
    • rs_attr_lookup_by_name()
    • rs_attr_update()
    • rs_attr_test_and_update()
    • rs_attr_delete()
    • rs_attr_get_referral()
    • rs_attr_get_effective()
  • The rs_attr_schema RPC Interface
    • Common Data Types and Constants for rs_attr_schema
      • sec_attr_acl_mgr_info_t
      • sec_attr_sch_entry_flags_t
      • sec_attr_intercell_action_t
      • sec_attr_trig_type_flags_t
      • sec_attr_acl_mgr_info_set_t
      • sec_attr_schema_entry_t
      • sec_attr_schema_entry_parts_t
    • Interface UUID for rs_attr_schema
    • rs_attr_schema_create_entry()
    • rs_attr_schema_delete_entry()
    • rs_attr_schema_update_entry()
    • rs_attr_schema_cursor_init()
    • rs_attr_schema_scan()
    • rs_attr_schema_lookup_by_name()
    • rs_attr_schema_lookup_by_id()
    • rs_attr_schema_get_referral()
    • rs_attr_schema_get_acl_mgrs()
    • rs_attr_schema_aclmgr_strings()
  • The rs_prop_acct RPC Interface
    • Common Data Types and Constants for rs_prop_acct
      • rs_prop_acct_add_data_t
      • rs_prop_acct_key_data_t
      • rs_replica_master_info_t and rs_replica_master_info_p_t
    • Interface UUID and Version Number for rs_prop_acct
    • rs_prop_acct_add()
    • rs_prop_acct_delete()
    • rs_prop_acct_rename()
    • rs_prop_acct_replace()
    • rs_prop_acct_add_key_version()
  • The rs_prop_acl RPC Interface
    • Common Data Types and Constants for rs_prop_acl
      • rs_prop_acl_data_t
    • Interface UUID and Version Number for rs_prop_acl
    • rs_prop_acl_replace()
  • The rs_prop_attr RPC Interface
    • Common Data Types and Constants for rs_prop_attr
      • rs_prop_attr_list_t
      • rs_prop_attr_data_t
    • Interface UUID and Version Number for rs_prop_attr
    • rs_prop_attr_update()
    • rs_prop_attr_delete()
  • The rs_prop_attr_schema RPC Interface
    • Common Data Types and Constants for rs_prop_attr_schema
      • rs_prop_attr_sch_create_data_t
    • Interface UUID and Version Number for rs_prop_attr_schema
    • rs_prop_attr_schema_create()
    • rs_prop_attr_schema_delete()
    • rs_prop_attr_schema_update()
  • The rs_prop_pgo RPC Interface
    • Common Data Types and Constants for rs_prop_pgo
      • rs_prop_pgo_add_data_t
    • Interface UUID and Version Number for rs_prop_pgo
    • rs_prop_pgo_add()
    • rs_prop_pgo_delete()
    • rs_prop_pgo_rename()
    • rs_prop_pgo_replace()
    • rs_prop_pgo_add_member()
    • rs_prop_pgo_delete_member()
  • The rs_prop_plcy RPC Interface
    • Interface UUID and Version Number for rs_prop_plcy
    • rs_prop_properties_set_info()
    • rs_prop_plcy_set_info()
    • rs_prop_auth_plcy_set_info()
    • rs_prop_plcy_set_dom_cache_info()
  • The rs_prop_replist RPC Interface
    • Interface UUID and Version Number for rs_prop_replist
    • rs_prop_replist_add_replica()
    • rs_prop_replist_del_replica()
  • The rs_pwd_mgmt RPC Interface
    • Common Data Types and Constants for rs_pwd_mgmt
      • rs_pwd_mgmt_plcy_t
    • Interface UUID and Version Number for rs_pwd_mgmt
    • rs_pwd_mgmt_setup()
  • The rs_qry RPC Interface
    • Interface UUID and Version Number for rs_qry
    • rs_query_are_you_there()
  • The rs_repadm RPC Interface
    • Common Data Types and Constants for rs_repadm
      • rs_sw_version_t
      • rs_replica_info_t
    • Interface UUID and Version Number for rs_repadm
    • rs_rep_admin_stop()
    • rs_rep_admin_maint()
    • rs_rep_admin_mkey()
    • rs_rep_admin_info()
    • rs_rep_admin_info_full()
    • rs_rep_admin_destroy()
    • rs_rep_admin_init_replica()
    • rs_rep_admin_change_master()
    • rs_rep_admin_become_master()
    • rs_rep_admin_become_slave()
  • The rs_replist RPC Interface
    • Common Data Types and Constants for rs_replist
      • rs_replica_item_t and rs_replica_item_p_t
      • Replica States
      • rs_replica_prop_t
      • rs_replica_prop_info_t
      • rs_replica_comm_t
      • rs_replica_comm_info_t
      • rs_replica_item_full_t
    • Interface UUID and Version Number for rs_replist
    • rs_replist_add_replica()
    • rs_replist_replace_replica()
    • rs_replist_delete_replica()
    • rs_replist_read()
    • rs_replist_read_full()
  • The rs_repmgr RPC Interface
    • Common Data Types and Constants for rs_repmgr
      • rs_replica_auth_t and rs_replica_auth_p_t
    • Interface UUID and Version Number for rs_repmgr
    • rs_rep_mgr_get_info_and_creds()
    • rs_rep_mgr_init()
    • rs_rep_mgr_init_done()
    • rs_rep_mgr_i_am_slave()
    • rs_rep_mgr_i_am_master()
    • rs_rep_mgr_become_master()
    • rs_rep_mgr_copy_all()
    • rs_rep_mgr_copy_propq()
    • rs_rep_mgr_stop_until_compat_sw()
  • The rs_rpladmn RPC Interface
    • Interface UUID and Version Number for rs_rpladmn
    • rs_rep_admin_stop()
    • rs_rep_admin_maint()
    • rs_rep_admin_mkey()
  • The rs_unix RPC Interface
    • Common Data Types and Constants for rs_unix
      • rs_unix_query_t
      • rs_unix_query_key_t
      • sec_rgy_unix_login_name_t
      • sec_rgy_unix_gecos_t
      • sec_rgy_unix_passwd_t
      • sec_rgy_member_buf_t
      • sec_rgy_unix_group_t
    • Interface UUID and Version Number for rs_unix
    • rs_unix_getpwents()
    • rs_unix_getmemberents()
  • The rs_update RPC Interface
    • Interface UUID and Version Number for rs_update
    • rs_rep_admin_info()
• ID Map Facility RPC Interface
  • The secidmap RPC Interface
    • Common Data Types and Constants for the secidmap Interface
      • rsec_id_output_selector_t
      • Global PGO Names
      • Status Codes
    • Interface UUID and Version Number for the secidmap Interface
    • rsec_id_parse_name()
    • rsec_id_gen_name()
    • rsec_id_parse_name_cache()
    • rsec_id_gen_name_cache()
• Key Management Facility RPC Interface
  • The Key Management RPC Interface
    • Common Data Types and Constants for Key Management
      • Status Codes
• Login Facility and Security Client Daemon (SCD) RPC Interface
  • The scd RPC Interface
    • Common Data Types and Constants for scd Interface
      • Status Codes
    • Interface UUID and Version Number for scd Interface
    • scd_protected_noop()
• Part 3
  • Security Application Programming Interface
• Access Control List API
  • Introduction
  • <dce/aclbase.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • sec_acl_bind
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_bind_to_addr
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_calc_mask
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_acl_get_access
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_get_error_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
    • RETURN VALUES
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_get_manager_types
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_get_mgr_types_semantics
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_get_printstring
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_lookup
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_release
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_release_handle
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_replace
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_test_access
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • RETURN VALUES
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
  • sec_acl_test_access_on_behalf
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • RETURN VALUES
    • DESCRIPTION
    • NOTES
    • ERRORS
    • SEE ALSO
• Registry API
  • Introduction
  • <dce/acct.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • <dce/binding.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • <dce/misc.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • <dce/pgo.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • <dce/policy.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • <dce/rgynbase.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • <dce/sec_rgy_attr.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • <dce/sec_rgy_attr_sch.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • sec_rgy_acct_add
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_acct_admin_replace
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_acct_delete
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_acct_get_projlist
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_acct_lookup
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_acct_passwd
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
  • sec_rgy_acct_rename
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_acct_replace_all
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_acct_user_replace
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_cursor_alloc
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_cursor_init
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_cursor_release
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_cursor_reset
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_delete
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_get_effective
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
  • sec_rgy_attr_lookup_by_id
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_lookup_by_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Warning
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_lookup_no_expand
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_aclmgr_strings
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_create_entry
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_cursor_alloc
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_cursor_init
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_cursor_release
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_cursor_reset
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_delete_entry
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_get_acl_mgrs
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_lookup_by_id
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_lookup_by_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_scan
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_sch_update_entry
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_test_and_update
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_attr_update
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_auth_plcy_get_effective
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_auth_plcy_get_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_auth_plcy_set_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_cell_bind
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_cursor_reset
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
    • DESCRIPTION
    • FILES
    • EXAMPLES
    • SEE ALSO
  • sec_rgy_login_get_effective
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_login_get_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_add
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_add_member
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_delete
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_delete_member
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_get_by_eff_unix_num
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_get_by_id
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_get_by_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_get_by_unix_num
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_get_members
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • RETURN VALUES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_get_next
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • CAUTIONS
    • RETURN VALUES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_id_to_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_id_to_unix_num
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_is_member
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • RETURN VALUES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_name_to_id
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_name_to_unix_num
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_rename
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_replace
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_unix_num_to_id
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_pgo_unix_num_to_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_plcy_get_effective
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_plcy_get_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_plcy_set_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_properties_get_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_properties_set_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_bind
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_bind_update
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_binding_get_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_close
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_get
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_is_readonly
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
    • DESCRIPTION
    • RETURN VALUES
    • FILES
    • SEE ALSO
  • sec_rgy_site_open
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_open_query
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_site_open_update
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • NOTES
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_rgy_unix_getgrgid
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
  • sec_rgy_unix_getgrnam
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
  • sec_rgy_unix_getpwnam
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
  • sec_rgy_unix_getpwuid
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
  • sec_rgy_wait_until_consistent
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • FILES
    • ERRORS
• ID Map API
  • Introduction
  • <dce/secidmap.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types and Constants
      • Status Codes
  • sec_id_gen_group
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_id_gen_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_id_parse_group
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_id_parse_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
      • Permissions Required
    • FILES
    • ERRORS
    • SEE ALSO
• Key Management API
  • Introduction
  • <dce/keymgmt.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types
      • Status Codes
  • sec_key_mgmt_change_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_delete_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_delete_key_type
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_free_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_garbage_collect
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_gen_rand_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_get_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_get_next_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_get_next_kvno
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_initialize_cursor
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_manage_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_release_cursor
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_key_mgmt_set_key
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
• Login API
  • Introduction
  • <dce/sec_login.h>
    • NAME
    • SYNOPSIS
    • DESCRIPTION
      • Data Types
      • Constants
      • Status Codes
      • Status Codes Specific to Delegation
  • sec_login_become_delegate
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • RELATED INFORMATION
  • sec_login_become_impersonator
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_become_initiator
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_certify_identity
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
    • SEE ALSO
  • sec_login_cred_get_delegate
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_cred_get_initiator
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_cred_init_cursor
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_disable_delegation
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_export_context
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_free_net_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
    • DESCRIPTION
    • SEE ALSO
  • sec_login_get_current_context
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_get_expiration
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_get_groups
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_get_pwent
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_import_context
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_init_first
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_inquire_net_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_newgroups
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
    • SEE ALSO
  • sec_login_purge_context
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_purge_context_exp
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_refresh_identity
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_release_context
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_set_context
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • ERRORS
    • SEE ALSO
  • sec_login_set_extended_attrs
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_setup_first
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
    • SEE ALSO
  • sec_login_setup_identity
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
    • SEE ALSO
  • sec_login_tkt_request_options
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_login_valid_and_cert_ident
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
    • SEE ALSO
  • sec_login_validate_first
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
    • SEE ALSO
  • sec_login_validate_identity
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
    • SEE ALSO
• EPAC Accessor Function (sec_cred) API
  • Introduction
  • sec_cred_free_attr_cursor
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_free_cursor
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_free_pa_handle
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_authz_session_info
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_client_princ_name
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_deleg_restrictions
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_delegate
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_delegation_type
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_extended_attrs
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_initiator
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_opt_restrictions
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_pa_data
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_req_restrictions
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_tgt_restrictions
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_get_v1_pac
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_initialize_attr_cursor
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_initialize_cursor
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • FILES
    • ERRORS
    • SEE ALSO
  • sec_cred_is_authenticated
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input
      • Output
    • DESCRIPTION
    • FILES
    • RETURN VALUES
    • SEE ALSO
• Miscellaneous Routines Needed for DCE Security
  • Introduction
  • rs_ns_entry_validate
    • NAME
    • SYNOPSIS
    • PARAMETERS
      • Input/Output
      • Output
    • DESCRIPTION
    • RETURN VALUES
    • ERRORS
• Part 4
  • Appendix
• Symbol Mapping Table
• Error Code Mapping List
• Glossary
  • access
  • access control list (ACL)
  • access determination algorithm
  • ACL manager
  • a priori trusted entity
  • asserted
  • assured service
  • attribute
  • attribute encoding type
  • attribute instance
  • attribute schema
  • attribute set
  • attribute type
  • attribute type UUID
  • attribute value
  • authenticity
  • authorisation
  • authorisation data
  • authority
  • call chain
  • cell
  • cell principal
  • certify
  • client
  • compromised
  • confidentiality
  • container object
  • credential
  • cryptography
  • data encryption standard (DES)
  • current login context
  • decode/decrypt
  • denial of service
  • delegation
  • delegate restrictions
  • delegation token
  • delegation type
  • direct requestor
  • distributed environment
  • distributed time service (DTS)
  • domain
  • encode
  • encrypt
  • endianness
  • EPAC
  • environment_set
  • ERA
  • ERA Database
  • final target
  • helpstring
  • home cell
  • insecure
  • integrity
  • item
  • immediate target
  • impersonation
  • initiator
  • integrator
  • intermediary
  • intermediate service
  • Kerckhoffs´ Doctrine
  • key
  • derived key
  • strong key
  • key management facility
  • login
  • login_set
  • message
  • multi-prong attack
  • multi-valued attribute
  • name-based authorisation
  • network login context
  • network TCB
  • object
  • PAC
  • pickle
  • policy
  • policy object
  • printstring
  • privilege attribute
  • privilege attribute certificate (PAC)
  • quota
  • PTGT
  • realm
  • reference monitor
  • registry object
  • replay attack
  • schema
  • schema entry
  • schema object
  • secret
  • secure
  • service
  • session
  • signature
  • simple object
  • site administrator
  • strength
  • subject
    • target
    • target restrictions
    • ticket
    • traced delegation
    • transit path
    • trigger
    • trigger type
    • trust
    • trusted computing base
    • validated login
    • weak password
• INDEX

Please note that the html version of this specification may contain formatting aberrations. The definitive version is available as an electronic publication on CD-ROM from The Open Group.