KRB5\_ACL\_MATCH\_FILE(3) Library Functions Manual KRB5\_ACL\_MATCH\_FILE(3)

# [NAME](#NAME)

`krb5_acl_match_file`, `krb5_acl_match_string` — ACL matching functions

# [LIBRARY](#LIBRARY)

Kerberos 5 Library (libkrb5, -lkrb5)

# [SYNOPSIS](#SYNOPSIS)

`krb5_error_code`  
`krb5_acl_match_file`(`krb5_context context`, `const char *file`, `const char *format`, `...`);

`krb5_error_code`  
`krb5_acl_match_string`(`krb5_context context`, `const char *string`, `const char *format`, `...`);

# [DESCRIPTION](#DESCRIPTION)

`krb5_acl_match_file` matches ACL format against each line in a file. Lines starting with # are treated like comments and ignored.

`krb5_acl_match_string` matches ACL format against a string.

The ACL format has three format specifiers: s, f, and r. Each specifier will retrieve one argument from the variable arguments for either matching or storing data. The input string is split up using " " and "\\t" as a delimiter; multiple " " and "\\t" in a row are considered to be the same.

s

Matches a string using [strcmp(3)](/man/os/heimdal/strcmp.3) (case sensitive).

f

Matches the string with [fnmatch(3)](/man/os/heimdal/fnmatch.3). The `flags` argument (the last argument) passed to the fnmatch function is 0.

r

Returns a copy of the string in the char \** passed in; the copy must be freed with [free(3)](/man/os/heimdal/free.3). There is no need to [free(3)](/man/os/heimdal/free.3) the string on error: the function will clean up and set the pointer to `NULL`.

All unknown format specifiers cause an error.

# [EXAMPLES](#EXAMPLES)

```
char *s;

ret = krb5_acl_match_string(context, "foo", "s", "foo");
if (ret)
    krb5_errx(context, 1, "acl didn't match");
ret = krb5_acl_match_string(context, "foo foo baz/kaka",
    "ss", "foo", &s, "foo/*");
if (ret) {
    /* no need to free(s) on error */
    assert(s == NULL);
    krb5_errx(context, 1, "acl didn't match");
}
free(s);
```

# [SEE ALSO](#SEE_ALSO)

[krb5(3)](/man/os/heimdal/krb5.3)

May 12, 2006 HEIMDAL

---

Document: krb5_acl_match_file(3) from heimdal 7.8.0-r55 (Chainguard OS)
Source: https://github.com/heimdal/heimdal