Authen::Krb4 - Perl extension for Kerberos 4
Authen::Krb4 is an object oriented extension to Perl 5 which implements several user-level Kerberos 4 functions. With this module, you can create Kerberized clients and servers written in Perl. It is compatible with both AFS and MIT Kerberos.
NOTE: No methods or variables are exported, so each variable and function should be preceded by 'Authen::Krb4::'
Contains the error code of the most recent Kerberos function call.
Returns the instance name of the host 'alias'
Returns the nth realm of the host machine. n is zero by default.
Returns the realm of the machine 'host'.
Returns an Authen::Krb4::Ticket object for the specified service, instance, and realm. It will return undef if there was an error.
Returns an Authen::Krb4::AuthDat object, which contains information obtained from the ticket, or undef upon failure. Ticket is a variable of the class Authen::Krb4::Ticket, which can be obtained from mk_req(). fn is a path to the appropriate srvtab. /etc/srvtab will be used if fn is null.
Search the caller's ticket file for a ticket for the service and instance in the given realm. Returns a Authen::Krb4::Creds object, or undef upon failure. This method can be used to extract a ticket's session key.
Returns the key schedule for the session key 'session', which can be obtained from rd_req() or get_cred(). The key schedule is an Authen::Krb4::KeySchedule object.
Encrypts the data stored in 'in' and returns the encrypted data. sender and receiver should be in standard internet format, which can be achieved using the inet_aton and sockaddr_in functions in the Socket module.
Decrypts the variable 'in' and returns the original data. Other parameters are as described in mk_priv()
Obtains a ticket for the specified service, instance, and realm, and writes it to the socket 'fh'. Use recvauth to read the ticket on the server. 'laddr' is the packed network address of the client, and 'faddr' is the packed network address of the server. 'options' can be any of the following:
Authen::Krb4::KOPT_DONT_MK_REQ Authen::Krb4::KOPT_DO_MUTUAL Authen::Krb4::KOPT_DONT_CANON
Use KOPT_DO_MUTUAL if you plan to do any encryption. This function returns a list containing the service ticket, the credentials, and the key schedule.
Reads a ticket/authenticator pair from the socket 'fh'. 'options' can be set as described above. 'faddr' is the packed network address of the client, and 'laddr' is the packed network address of the server. This function returns a list containing the ticket, an AuthDat object, the key schedule, and the version string.
Tries to get an initial ticket for 'user' using 'password'. This function is especially useful for verifying a user's password. See the Kerberos documentation for details.
Tries to get an initial ticket for 'user' using the private key stored in 'srvtab'.
Extracts the private key from a srvtab and returns it. Use a kvno of 0 to extract the first matching entry.
Destroys the ticket file, much like kdestroy.
Returns a string containing a textual description of the kerberos error number n.
There are four classes in the Authen::Krb4 module, Ticket, AuthDat, Creds, and KeySchedule. They are all simply abstractions of Kerberos 4 structures. You almost never need to worry about creating new objects--the functions which return these objects create them for you (is this the best thing to do?). The one exception is when you need to construct a Ticket object for rd_req(). See below for details.
Contains a ticket for a specified service, instance, and realm.
Returns a new Ticket object containing the data in 'dat'. You must create a new Ticket object on the server side for passing to rd_req().
The data contained in the ticket. Looks like junk to the naked eye.
The length of the data contained in 'dat'.
Contains the contents of the AUTH_DAT structure returned by rd_req(). See below for the goodies.
Returns the principal's name.
Returns the principal's instance.
Returns the principal's realm.
The session key. Pass this to get_key_sched() to obtain a key schedule for encryption.
Flags from the ticket.
The checksum from the ticket. See mk_req().
Life of the ticket.
The time the ticket was issued. localtime() can convert this to a nicer format.
The address in the ticket. Useful for mutual authentication.
Reply to send to the client (not implemented yet).
Contains information retreived from your ticket file.
The service name.
Returns the session key. Pass this to get_key_sched() to obtain a key schedule for encryption.
The lifetime of the ticket.
The key version number.
The ticket itself.
The date the ticket was issued.
The name of the principal.
The instance of the principal.
You don't need to fool around with this.
Jeff Horwitz <email@example.com>