1.\" $NetBSD: krb524_convert_creds_kdc.3,v 1.5 2023/06/19 21:41:44 christos Exp $ 2.\" 3.\" Copyright (c) 2004 Kungliga Tekniska Högskolan 4.\" (Royal Institute of Technology, Stockholm, Sweden). 5.\" All rights reserved. 6.\" 7.\" Redistribution and use in source and binary forms, with or without 8.\" modification, are permitted provided that the following conditions 9.\" are met: 10.\" 11.\" 1. Redistributions of source code must retain the above copyright 12.\" notice, this list of conditions and the following disclaimer. 13.\" 14.\" 2. Redistributions in binary form must reproduce the above copyright 15.\" notice, this list of conditions and the following disclaimer in the 16.\" documentation and/or other materials provided with the distribution. 17.\" 18.\" 3. Neither the name of the Institute nor the names of its contributors 19.\" may be used to endorse or promote products derived from this software 20.\" without specific prior written permission. 21.\" 22.\" THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND 23.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 24.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 25.\" ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE 26.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 27.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 28.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 29.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 30.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 31.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 32.\" SUCH DAMAGE. 33.\" 34.\" Id 35.\" 36.Dd March 20, 2004 37.Dt KRB524_CONVERT_CREDS_KDC 3 38.Os 39.Sh NAME 40.Nm krb524_convert_creds_kdc , 41.Nm krb524_convert_creds_kdc_ccache 42.Nd converts Kerberos 5 credentials to Kerberos 4 credentials 43.Sh LIBRARY 44Kerberos 5 Library (libkrb5, -lkrb5) 45.Sh SYNOPSIS 46.In krb5/krb5.h 47.Ft krb5_error_code 48.Fo krb524_convert_creds_kdc 49.Fa "krb5_context context" 50.Fa "krb5_creds *in_cred" 51.Fa "struct credentials *v4creds" 52.Fc 53.Ft krb5_error_code 54.Fo krb524_convert_creds_kdc_ccache 55.Fa "krb5_context context" 56.Fa "krb5_ccache ccache" 57.Fa "krb5_creds *in_cred" 58.Fa "struct credentials *v4creds" 59.Fc 60.Sh DESCRIPTION 61Convert the Kerberos 5 credential to Kerberos 4 credential. 62This is done by sending them to the 524 service in the KDC. 63.Pp 64.Fn krb524_convert_creds_kdc 65converts the Kerberos 5 credential in 66.Fa in_cred 67to Kerberos 4 credential that is stored in 68.Fa credentials . 69.Pp 70.Fn krb524_convert_creds_kdc_ccache 71is different from 72.Fn krb524_convert_creds_kdc 73in that way that if 74.Fa in_cred 75doesn't contain a DES session key, then a new one is fetched from the 76KDC and stored in the cred cache 77.Fa ccache , 78and then the KDC is queried to convert the credential. 79.Pp 80This interfaces are used to make the migration to Kerberos 5 from 81Kerberos 4 easier. 82There are few services that still need Kerberos 4, and this is mainly 83for compatibility for those services. 84Some services, like AFS, really have Kerberos 5 supports, but still 85uses the 524 interface to make the migration easier. 86.Sh SEE ALSO 87.Xr krb5 3 , 88.Xr krb5.conf 5 89