# MIT Kerberos Documentation

Contents | previous | next | index | Search | feedback

# krb5_cc_retrieve_cred - Retrieve a specified credentials from a credential cache.

krb5_error_code krb5_cc_retrieve_cred(krb5_context context, krb5_ccache cache, krb5_flags flags, krb5_creds *mcreds, krb5_creds *creds)

param:

  [in] context - Library context

  [in] cache - Credential cache handle

  [in] flags - Flags bit mask

  [in] mcreds - Credentials to match

  [out] creds - Credentials matching the requested value

retval:

  - 0 Success; otherwise - Kerberos error codes

This function searches a credential cache for credentials matching mcreds and returns it if found.

Valid values for flags are:

> > - KRB5_TC_MATCH_TIMES The requested lifetime must be at least as great as in mcreds .

> > - KRB5_TC_MATCH_IS_SKEY The is_skey field much match exactly.

> > - KRB5_TC_MATCH_FLAGS Flags set in mcreds must be set.

> > - KRB5_TC_MATCH_TIMES_EXACT The requested lifetime must match exactly.

> > - KRB5_TC_MATCH_FLAGS_EXACT Flags must match exactly.

> > - KRB5_TC_MATCH_AUTHDATA The authorization data must match.

> > - KRB5_TC_MATCH_SRV_NAMEONLY Only the name portion of the principal name must match, not the realm.

> > - KRB5_TC_MATCH_2ND_TKT The second tickets must match.

> > - KRB5_TC_MATCH_KTYPE The encryption key types must match.

> > - KRB5_TC_SUPPORTED_KTYPES Check all matching entries that have any supported encryption type and return the one with the encryption type listed earliest.

> Use krb5_free_cred_contents() to free creds when it is no longer needed.