RPC\_GSS\_SECCREATE(3) Library Functions Manual RPC\_GSS\_SECCREATE(3)

# [NAME](#NAME)

`rpc_gss_seccreate` — create a security context using the RPCSEC\_GSS protocol

# [SYNOPSIS](#SYNOPSIS)

`#include <rpc/rpcsec_gss.h>`

`AUTH *`  
`rpc_gss_seccreate`(`CLIENT *clnt`, `const char *principal`, `const char *mechanism`, `rpc_gss_service_t service`, `const char *qop`, `rpc_gss_options_req_t *options_req`, `rpc_gss_options_ret_t *options_ret`);

# [DESCRIPTION](#DESCRIPTION)

This function is used to establish a security context between an application and a remote peer using the RPSEC\_GSS protocol.

# [PARAMETERS](#PARAMETERS)

clnt

An RPC handle which is connected to the remote peer

principal

The name of the service principal on the remote peer. For instance, a principal such as "nfs@server.example.com" might be used by an application which needs to contact an NFS server

mechanism

The name of the GSS\_API mechanism to use for the new security context. "kerberos\_v5" is currently the only supported mechanism.

service

Type of service requested.

rpc\_gss\_svc\_default

The default - typically the same as `rpc_gss_svc_none`.

rpc\_gss\_svc\_none

RPC headers only are integrity protected by a checksum.

rpc\_gss\_svc\_integrity

RPC headers and data are integrity protected by a checksum.

rpc\_gss\_svc\_privacy

RPC headers are integrity protected by a checksum and data is encrypted.

qop

The name of the Quality of Protection to use for the new security context, or NULL to use the default QOP. "GSS\_C\_QOP\_DEFAULT" is currently the only supported QOP.

options\_req

Extra security context options to be passed to the underlying GSS-API mechanism. Pass `NULL` to supply default values.

options\_ret

Various values returned by the underlying GSS-API mechanism. Pass `NULL` if these values are not required.

# [RETURN VALUES](#RETURN_VALUES)

If the security context was created successfully, a pointer to an `AUTH` structure that represents the context is returned. To use this security context for subsequent RPC calls, set `clnt->cl_auth` to this value.

# [AVAILABILITY](#AVAILABILITY)

The [`rpc_gss_seccreate`](#rpc_gss_seccreate)() function is part of libtirpc.

# [SEE ALSO](#SEE_ALSO)

[rpc(3)](/man/os/libtirpc/rpc.3), [gssapi(3)](/man/os/libtirpc/gssapi.3), [mech(5)](/man/os/libtirpc/mech.5), [qop(5)](/man/os/libtirpc/qop.5), [rpcsec\_gss(3)](/man/os/libtirpc/rpcsec_gss.3)

# [AUTHORS](#AUTHORS)

This manual page was written by Doug Rabson ⟨dfr@FreeBSD.org⟩.

January 26, 2010 Linux 4.19.0-gvisor

---

Document: rpc_gss_seccreate(3t) from libtirpc 1.3.8-r0 (Chainguard OS)
Source: https://downloads.sourceforge.net/project/libtirpc/libtirpc/1.3.8/libtirpc-1.3.8.tar.bz2