NAME

afsperlka - ka (Authentication Server) functions

SYNOPIS

  use AFS;              # import all AFS names
  use AFS @AFS::KA;     # import just the ka names

  ka_UserAthenticateGeneral
  ka_ParseLogin
  ka_StringToKey
  ka_des_string_to_key
  ka_ReadPassword
  ka_UserReadPassword
  ka_LocalCell;
  ka_ExpandCell
  ka_CellToRealm
  ka_GetAuthToken
  ka_GetAdminToken
  ka_nulltoken
  ka_AuthServerConn
  ka_SingleServerConn

  $kas -> getentry
  $kas -> listentry
  $kas -> create
  $kas -> delete
  $kas -> randomkey
  $kas -> debug
  $kas -> getstats
  $kas -> setpassword


  $kas -> KAM_GetEntry
  $kas -> KAM_Debug
  $kas -> KAM_GetStats
  $kas -> KAM_GetRandomKey
  $kas -> KAM_CreateUser
  $kas -> KAM_SetPassword
  $kas -> KAM_DeleteUser
  $kas -> KAM_ListEntry
  $kas -> KAM_SetFields

  $kas -> ka_ChangePassword
  $kas -> ka_Authenticate
  $kas -> ka_GetToken

DESCRIPTION

This document describes the KAS (Kerberos Authenication Server) functions available in the AFS module.

$ok = ka_UserAthenticateGeneral($princ, $pass, $life, $flags [,$pwexpires [,$reason]]);

($name, $inst, $cell) = ka_ParseLoginName($login);

  Parse user­entered login name; calls ka_ParseLoginName

$DESKEY = ka_StringToKey($str, $cell=0);

  Calls the AFS/Andrew string-to-key function.

$DESKEY = ka_des_string_to_key($str);

  Calls the des_string_to_key function, returns AFS::KTC_ENCRYPTIONKEY object.

$key = ka_ReadPassword($prompt, $verify=0, $cell=0);

  Reads password and converts to DES key.

$pass = ka_UserReadPassword($prompt [,$reason]);

  Reads password and returns as string. Returns undef and sets $AFS::CODE
  on error.

$cell = ka_LocalCell;

$cell = ka_ExpandCell($c);

$realm = ka_CellToRealm($c);

$ok = ka_GetAuthToken($princ,$key, $life [, $pwexpires]);

$token = ka_GetAdminToken(ktc_principcal, key, life, $new=1);

$token = ka_GetServerToken(ktc_principcal, life);

  Returns a token for a server.

ka_nulltoken

  Returns NULL token for use with ka_AuthServerConn or ka_SingleServerConn
  (to get an authenticated connection). Do not use with any other routines.

$kas = ka_AuthServerConn($token, $service [,$cell]);

$kas = ka_SingleServerConn($host,$token, $service [, $cell]);

$entry = $kas -> getentry($user,$inst);

($user,$inst) = $kas -> listentry($context [,$count]);

$ok = $kas ->create($name, $instance, $deskey);

$ok = $kas ->delete($name, $instance);

$key = $kas ->randomkey();

$entry = $kas ->debug();

($num_admins, $stats, $dstats) = $kas -> getstats;

$ok = $kas ->setpassword($name, $instance, $kvno, $deskey);

$ok = $kas ->ka_ChangePassword($name, $instance, $oldkey, $newkey);

$token = $kas -> ka_Authenticate($name, $inst, $service, $key, $start, $end [, $pwexpires]);

$token = $kas -> ka_GetToken($name, $inst, $start, $end, $auth_token [, $auth_domain]);