KUSEROK(3) BSD Programmer's Manual KUSEROK(3) NNAAMMEE kuserok - Kerberos version of ruserok SSYYNNOOPPSSIISS ##iinncclluuddee <> kkuusseerrookk((kkddaattaa,, llooccaalluusseerr)) AAUUTTHH__DDAATT **aauutthh__ddaattaa;; cchhaarr **llooccaalluusseerr;; DDEESSCCRRIIPPTTIIOONN _k_u_s_e_r_o_k determines whether a Kerberos principal described by the structure _a_u_t_h___d_a_t_a is authorized to login as user _l_o_c_a_l_u_s_e_r according to the authorization file ("~_l_o_c_a_l_u_s_e_r/.klogin" by default). It returns 0 (zero) if authorized, 1 (one) if not authorized. If there is no account for _l_o_c_a_l_u_s_e_r on the local machine, authorization is not granted. If there is no authoriza- tion file, and the Kerberos principal described by _a_u_t_h___d_a_t_a translates to _l_o_c_a_l_u_s_e_r (using _k_r_b___k_n_t_o_l_n(3)), authorization is granted. If the authorization file can't be accessed, or the file is not owned by _l_o_c_a_l_u_s_e_r_, autho- rization is denied. Otherwise, the file is searched for a matching principal name, instance, and realm. If a match is found, authorization is granted, else authorization is denied. The file entries are in the format: name.instance@realm with one entry per line. SSEEEE AALLSSOO kerberos(3), ruserok(3), krb_kntoln(3) FFIILLEESS ~_l_o_c_a_l_u_s_e_r/.klogin authorization list MIT Project Athena Kerberos Version 4.0 1