NAME

sec_login_validate_first-Validate host's current login context

SYNOPSIS

#include <dce/sec_login.h>

boolean32 sec_login_validate_first (
    sec_login_handle_t login_context,
    boolean32 *reset_passwd,
    sec_login_auth_src_t *authn_src,
    error_status_t *status );

PARAMETERS

Input

login_context

Login context to be validated.

Output

reset_passwd

Indicates whether a principal/account's password has expired.

authn_src

The source of validation (or authentication) of this login context.

status

The completion status.

DESCRIPTION

The sec_login_validate_first() routine validates (see sec_login_validate_identity()) the calling process's current login context, which must be the host's login context (set up, for example, by sec_login_setup_first()).

Typically, this routine is called from a host's SCD (or from the host's initial process, sometimes called init), to validate the host's login context for the host's hierarchy of daemon processes. This routine does not have a password parameter (as does sec_login_validate_identity()) -implementations typically manage the host principal/account's key with the sec_key_mgmt API.

RETURN VALUES

This routine returns non-0 (TRUE) if the validation was successful, and 0 (FALSE) otherwise.

ERRORS

error_status_ok

sec_login_s_privileged

sec_rgy_server_unavailable

SEE ALSO

Functions: sec_login_init_first(), sec_login_setup_first(), sec_login_validate_identity().