NAME

       krb5_check_transited,  krb5_check_transited_realms,  krb5_domain_x500_decode,  krb5_domain_x500_encode  —
       realm transit verification and encoding/decoding functions

LIBRARY

       Kerberos 5 Library (libkrb5, -lkrb5)

SYNOPSIS

       #include <krb5.h>

       krb5_error_code
       krb5_check_transited(krb5_context context, krb5_const_realm client_realm,  krb5_const_realm server_realm,
           krb5_realm *realms, int num_realms, int *bad_realm);

       krb5_error_code
       krb5_check_transited_realms(krb5_context context,        const char *const *realms,       int num_realms,
           int *bad_realm);

       krb5_error_code
       krb5_domain_x500_decode(krb5_context context,     krb5_data tr,     char ***realms,      int *num_realms,
           const char *client_realm, const char *server_realm);

       krb5_error_code
       krb5_domain_x500_encode(char **realms, int num_realms, krb5_data *encoding);

DESCRIPTION

       krb5_check_transited()  checks  the path from client_realm to server_realm where realms and num_realms is
       the realms between them.  If the function returns an error value, bad_realm will be set to the  realm  in
       the  list causing the error.  krb5_check_transited() is used internally by the KDC and libkrb5 and should
       not be called by client applications.

       krb5_check_transited_realms() is deprecated.

       krb5_domain_x500_encode() and krb5_domain_x500_decode() encodes and decodes the realm names in  the  X500
       format that Kerberos uses to describe the transited realms in krbtgts.

SEE ALSO

       krb5(3), krb5.conf(5)

HEIMDAL                                            May 1, 2006                           KRB5_CHECK_TRANSITED(3)