krb5_acl_match_file, krb5_acl_match_string — ACL matching functions

krb5_acl_match_file  matches  ACL  format against each line in a file.  Lines starting with # are treated
       like comments and ignored.

       krb5_acl_match_string matches ACL format against a string.

       The ACL format has three format specifiers: s, f, and r.  Each specifier will retrieve one argument  from
       the  variable  arguments for either matching or storing data.  The input string is split up using " " and
       "\t" as a delimiter; multiple " " and "\t" in a row are considered to be the same.

             s    Matches a string using strcmp(3) (case sensitive).

             f    Matches the string with fnmatch(3).  The flags argument (the  last  argument)  passed  to  the
                  fnmatch function is 0.

             r    Returns  a  copy  of the string in the char ** passed in; the copy must be freed with free(3).
                  There is no need to free(3) the string on error: the  function  will  clean  up  and  set  the
                  pointer to NULL.

       All unknown format specifiers cause an error.

             char *s;

             ret = krb5_acl_match_string(context, "foo", "s", "foo");
             if (ret)
                 krb5_errx(context, 1, "acl didn't match");
             ret = krb5_acl_match_string(context, "foo foo baz/kaka",
                 "ss", "foo", &s, "foo/*");
             if (ret) {
                 /* no need to free(s) on error */
                 assert(s == NULL);
                 krb5_errx(context, 1, "acl didn't match");
             }
             free(s);

       Kerberos 5 Library (libkrb5, -lkrb5)

       krb5_acl_match_file, krb5_acl_match_string — ACL matching functions

krb5(3)

HEIMDAL                                           May 12, 2006                            KRB5_ACL_MATCH_FILE(3)

krb5_error_codekrb5_acl_match_file(krb5_contextcontext, constchar*file, constchar*format, ...);

       krb5_error_codekrb5_acl_match_string(krb5_contextcontext, constchar*string, constchar*format, ...);