GSI Authorization API

Initialize Handle
globus_result_t	globus_gsi_authz_handle_init (globus_gsi_authz_handle_t *handle, const char *service_name, const gss_ctx_id_t context, globus_gsi_authz_cb_t callback, void *callback_arg)

Authorization decision made here
globus_result_t	globus_gsi_authorize (globus_gsi_authz_handle_t handle, const void *action, const void *object, globus_gsi_authz_cb_t callback, void *callback_arg)

Destroy Handle
globus_result_t	globus_gsi_authz_handle_destroy (globus_gsi_authz_handle_t handle, globus_gsi_authz_cb_t callback, void *callback_arg)

Query for authorization identity
globus_result_t	globus_gsi_authz_get_authorization_identity (globus_gsi_authz_handle_t handle, char **identity_ptr, globus_gsi_authz_cb_t callback, void *callback_arg)

Detailed Description

Function Documentation

globus_result_t globus_gsi_authz_handle_init	(	globus_gsi_authz_handle_t *	handle,
		const char *	service_name,
		const gss_ctx_id_t	context,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Initializes a handle.

Parameters

handle	Pointer to the handle that is to be initialized
service_name	Service to authorize access to
context	Security context used to contact the service
callback	Callback function to call when authz handle init completes
callback_arg	Argument to callback function

Returns

GLOBUS_SUCCESS if successful A Globus error object on failure:

globus_result_t globus_gsi_authorize	(	globus_gsi_authz_handle_t	handle,
		const void *	action,
		const void *	object,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Authorization decision made here.

Parameters

handle	Pointer to the handle that is to be initialized
action	Action to authorize
object	Object that the action pertains to.
callback	Callback function to call when authorization completes
callback_arg	Argument to callback function

Returns

GLOBUS_SUCCESS if successful A Globus error object on failure:

globus_result_t globus_gsi_authz_handle_destroy	(	globus_gsi_authz_handle_t	handle,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Destroy a Globus GSI authz handle.

Parameters

handle	The handle that is to be destroyed
callback	Callback function to call when handle is destroyed
callback_arg	Argument to callback function

Returns

GLOBUS_SUCCESS

globus_result_t globus_gsi_authz_get_authorization_identity	(	globus_gsi_authz_handle_t	handle,
		char **	identity_ptr,
		globus_gsi_authz_cb_t	callback,
		void *	callback_arg
	)

Query for authorization identity.

Parameters

handle	The handle that is to be used for the identity check.
identity_ptr	The authorization identity determined by the authorization handle. This is must be freed by the caller. If the value is NULL (and this function returned GLOBUS_SUCCESS), the caller should use the authenticated identity.
callback	Callback function to call when identity is determined.
callback_arg	Argument to callback function.

Returns

GLOBUS_SUCCESS