Simple Authentication Security Layer Library Functions
                                          saslauthorizet(3SASL)



NAME
     saslauthorizet - the SASL authorization callback

SYNOPSIS
     cc [ flag ... ] file ... -lsasl   [ library ... ]
     #include 

     int saslauthorizet(saslconnt *conn, const char *requesteduser,
          unsigned alen, const char* authidentity, unsigned rlen,
          const char *defrealm, unsigned urlen, struct propctx *propctx);


DESCRIPTION
     saslauthorizet() is  a  typedef  function  prototype  that
     defines     the     interface     associated     with    the
     SASLCBPROXYPOLICY callback.


     Use the saslauthorizet() interface to  check  whether  the
     authorized   user   authidentity   can   act  as  the  user
     requesteduser. For example,  the  user  root  may  want  to
     authenticate  with  root's credentials but as the user tmar-
     tin, with all of tmartin's  rights,  not  root's.  A  server
     application  should be very careful when it determines which
     users may proxy as other users.

PARAMETERS
     conn              The SASL connection context.


     requesteduser    The identity  or  username  to  authorize.
                       requesteduser is null-terminated.


     rlen              The length of requesteduser.


     authidentity     The identity associated with  the  secret.
                       authidentity is null-terminated.


     alen              The length of authidentity.


     defaultrealm     The  default  user  realm  as  passed   to
                       saslservernew(3SASL).


     ulren             The length of the default realm





SunOS 5.11          Last change: 27 Oct 2003                    1






Simple Authentication Security Layer Library Functions
                                          saslauthorizet(3SASL)



     propctx           Auxiliary properties


RETURN VALUES
     Like  other  SASL  callback  functions,   saslauthorizet()
     returns  an  integer  that corresponds to a SASL error code.
     See  for a complete list of SASL error codes.

ERORS
     SASLOK    The call to saslauthorizet() was successful.



     See saslerrors(3SASL) for information on SASL error codes.

ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Availability                 SUNWlibsasl                 
    
     Interface Stability          Evolving                    
    
     MT-Level                     MT-Safe                     
    


SEE ALSO
     saslerrors(3SASL), saslservernew(3SASL), attributes(5)




















SunOS 5.11          Last change: 27 Oct 2003                    2






Simple Authentication Security Layer Library Functions
                                          saslauthorizet(3SASL)






















































SunOS 5.11          Last change: 27 Oct 2003                    3