GSI Authorization API

Initialize Handle

globus_result_t globus_gsi_authz_handle_init (globus_gsi_authz_handle_t *handle, const char *service_name, const gss_ctx_id_t context, globus_gsi_authz_cb_t callback, void *callback_arg)
 

Authorization decision made here

globus_result_t globus_gsi_authorize (globus_gsi_authz_handle_t handle, const void *action, const void *object, globus_gsi_authz_cb_t callback, void *callback_arg)
 

Destroy Handle

globus_result_t globus_gsi_authz_handle_destroy (globus_gsi_authz_handle_t handle, globus_gsi_authz_cb_t callback, void *callback_arg)
 

Query for authorization identity

globus_result_t globus_gsi_authz_get_authorization_identity (globus_gsi_authz_handle_t handle, char **identity_ptr, globus_gsi_authz_cb_t callback, void *callback_arg)
 

Detailed Description

Function Documentation

globus_result_t globus_gsi_authz_handle_init ( globus_gsi_authz_handle_t *  handle,
const char *  service_name,
const gss_ctx_id_t  context,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Initializes a handle.

Parameters
handlePointer to the handle that is to be initialized
service_nameService to authorize access to
contextSecurity context used to contact the service
callbackCallback function to call when authz handle init completes
callback_argArgument to callback function
Returns
GLOBUS_SUCCESS if successful A Globus error object on failure:
globus_result_t globus_gsi_authorize ( globus_gsi_authz_handle_t  handle,
const void *  action,
const void *  object,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Authorization decision made here.

Parameters
handlePointer to the handle that is to be initialized
actionAction to authorize
objectObject that the action pertains to.
callbackCallback function to call when authorization completes
callback_argArgument to callback function
Returns
GLOBUS_SUCCESS if successful A Globus error object on failure:
globus_result_t globus_gsi_authz_handle_destroy ( globus_gsi_authz_handle_t  handle,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Destroy a Globus GSI authz handle.

Parameters
handleThe handle that is to be destroyed
callbackCallback function to call when handle is destroyed
callback_argArgument to callback function
Returns
GLOBUS_SUCCESS
globus_result_t globus_gsi_authz_get_authorization_identity ( globus_gsi_authz_handle_t  handle,
char **  identity_ptr,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Query for authorization identity.

Parameters
handleThe handle that is to be used for the identity check.
identity_ptrThe authorization identity determined by the authorization handle. This is must be freed by the caller. If the value is NULL (and this function returned GLOBUS_SUCCESS), the caller should use the authenticated identity.
callbackCallback function to call when identity is determined.
callback_argArgument to callback function.
Returns
GLOBUS_SUCCESS

about globus | globus toolkit | dev.globus

Comments? webmaster@globus.org