# MIT Kerberos Documentation

Contents | previous | next | index | Search | feedback

# krb5_get_etype_info - Retrieve enctype, salt and s2kparams from KDC.

krb5_error_code krb5_get_etype_info(krb5_context context, krb5_principal principal, krb5_get_init_creds_opt *opt, krb5_enctype *enctype_out, krb5_data *salt_out, krb5_data *s2kparams_out)

param

  [in] context - Library context

  [in] principal - Principal whose information is requested

  [in] opt - Initial credential options

  [out] enctype_out - The enctype chosen by KDC

  [out] salt_out - Salt returned from KDC

  [out] s2kparams_out - String-to-key parameters returned from KDC

retval

  - 0 Success

return

  - A Kerberos error code

Send an initial ticket request for principal and extract the encryption type, salt type, and string-to-key parameters from the KDC response. If the KDC provides no etype-info, set enctype_out to ENCTYPE_NULL and set salt_out and s2kparams_out to empty. If the KDC etype-info provides no salt, compute the default salt and place it in salt_out . If the KDC etype-info provides no string-to-key parameters, set s2kparams_out to empty.

> opt may be used to specify options which affect the initial request, such as request encryption types or a FAST armor cache (see `krb5_get_init_creds_opt_set_etype_list()` and `krb5_get_init_creds_opt_set_fast_ccache_name()` ).

Use `krb5_free_data_contents()` to free salt_out and s2kparams_out when they are no longer needed.

Note

New in 1.17