GSI Authorization API

Initialize Handle

globus_result_t globus_gsi_authz_handle_init (globus_gsi_authz_handle_t *handle, const char *service_name, const gss_ctx_id_t context, globus_gsi_authz_cb_t callback, void *callback_arg)

Authorization decision made here

globus_result_t globus_gsi_authorize (globus_gsi_authz_handle_t handle, const void *action, const void *object, globus_gsi_authz_cb_t callback, void *callback_arg)

Destroy Handle

globus_result_t globus_gsi_authz_handle_destroy (globus_gsi_authz_handle_t handle, globus_gsi_authz_cb_t callback, void *callback_arg)

Query for authorization identity

globus_result_t globus_gsi_authz_get_authorization_identity (globus_gsi_authz_handle_t handle, char **identity_ptr, globus_gsi_authz_cb_t callback, void *callback_arg)

Detailed Description


Function Documentation

globus_result_t globus_gsi_authz_handle_init ( globus_gsi_authz_handle_t *  handle,
const char *  service_name,
const gss_ctx_id_t  context,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Initializes a handle.

Parameters:
handlePointer to the handle that is to be initialized
service_nameService to authorize access to
contextSecurity context used to contact the service
callbackCallback function to call when authz handle init completes
callback_argArgument to callback function
Returns:
GLOBUS_SUCCESS if successful A Globus error object on failure:
globus_result_t globus_gsi_authorize ( globus_gsi_authz_handle_t  handle,
const void *  action,
const void *  object,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Authorization decision made here.

Parameters:
handlePointer to the handle that is to be initialized
actionAction to authorize
objectObject that the action pertains to.
callbackCallback function to call when authorization completes
callback_argArgument to callback function
Returns:
GLOBUS_SUCCESS if successful A Globus error object on failure:
globus_result_t globus_gsi_authz_handle_destroy ( globus_gsi_authz_handle_t  handle,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Destroy a Globus GSI authz handle.

Parameters:
handleThe handle that is to be destroyed
callbackCallback function to call when handle is destroyed
callback_argArgument to callback function
Returns:
GLOBUS_SUCCESS
globus_result_t globus_gsi_authz_get_authorization_identity ( globus_gsi_authz_handle_t  handle,
char **  identity_ptr,
globus_gsi_authz_cb_t  callback,
void *  callback_arg 
)

Query for authorization identity.

Parameters:
handleThe handle that is to be used for the identity check.
identity_ptrThe authorization identity determined by the authorization handle. This is must be freed by the caller. If the value is NULL (and this function returned GLOBUS_SUCCESS), the caller should use the authenticated identity.
callbackCallback function to call when identity is determined.
callback_argArgument to callback function.
Returns:
GLOBUS_SUCCESS

about globus | globus toolkit | dev.globus

Comments? webmaster@globus.org