NAME

sec_login_init_first-Initialise process's default login context inheritance mechanism

SYNOPSIS

#include <dce/sec_login.h>

void sec_login_init_first (
    error_status_t *status );

PARAMETERS

Output

status

The completion status.

DESCRIPTION

The sec_login_init_first() routine initialises the calling process' current login context inheritance mechanism, thereby making the calling process' current login context (potentially) accessible to other processes on the local host (especially those in the host's daemon process hierarchy).

In typical implementations, this routine merely records the name of a cache file (not yet populated-see sec_login_setup_first()) which is to contain the host principal/account's login context in an (implementation-specific) well-known environment variable (typically, KRB5CCNAME), thereby marking it as the calling process' current login context. Child processes thus inherit the host's default login context, provided they have access privilege to the cache file, and provided the cache file is actually populated (by sec_login_setup_first()).

If the default inheritance mechanism is already initialised, the operation fails.

Typically, this routine is called from a host's SCD (or from the host's initial process, sometimes called init) at boot time to initialise the current login context for inheritance by the host's hierarchy of daemon processes.

ERRORS

error_status_ok

sec_login_s_default_use

sec_login_s_privileged

SEE ALSO

Functions: sec_login_setup_first(), sec_login_validate_first().