Struct libgssapi::context::ServerCtx

pub struct ServerCtx(_);

The server side of a security context. Contexts are wrapped in and Arc<Mutex<_>> internally, so clones work and you can use them safely from other threads.

Methods

impl ServerCtx

pub fn new(cred: Cred) -> ServerCtx

Create a new uninitialized server context with the specified credentials. You must then call step until the context is fully initialized. The mechanism is not specified because it is dictated by the client.

pub fn step(&self, tok: &[u8]) -> Result<Option<Buf>, Error>

Perform 1 step in the initialization of the server context, feeding it a token you received from the client. If initialization is complete from the point of view of the server then this will return Ok(None). Otherwise it will return a token that needs to be sent to the client and fed to ClientCtx::step.

Trait Implementations

impl Clone for ServerCtx

fn clone(&self) -> ServerCtx

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServerCtx

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl SecurityContext for ServerCtx

fn wrap(&self, encrypt: bool, msg: &[u8]) -> Result<Buf, Error>

Wrap a message with optional encryption. If encrypt is true then only the other side of the context can read the message. In any case the other side can always verify message integrity.

fn wrap_iov(&self, encrypt: bool, msg: &mut [GssIov]) -> Result<(), Error>

From the MIT kerberos documentation,

fn wrap_iov_length(
    &self,
    encrypt: bool,
    msg: &mut [GssIovFake]
) -> Result<(), Error>

This will set the required length of all the buffers except the data buffer, which must be provided as it will be to wrap_iov. The value of the encrypt flag must match what you pass to wrap_iov.

fn unwrap(&self, msg: &[u8]) -> Result<Buf, Error>

Unwrap a wrapped message, checking it's integrity and decrypting it if necessary.

fn unwrap_iov(&self, msg: &mut [GssIov]) -> Result<(), Error>

From the MIT Kerberos documentation,

fn info(&self) -> Result<CtxInfo, Error>

Get all information about a security context in one call

fn source_name(&self) -> Result<Name, Error>

Get the source name of the security context

fn target_name(&self) -> Result<Name, Error>

Get the target name of the security context

fn lifetime(&self) -> Result<Duration, Error>

Get the lifetime of the security context

fn mechanism(&self) -> Result<&'static Oid, Error>

Get the mechanism of the security context

fn flags(&self) -> Result<CtxFlags, Error>

Get the flags of the security context

fn local(&self) -> Result<bool, Error>

Return true if the security context was locally initiated

fn open(&self) -> Result<bool, Error>

Return true if the security context is open