saslserverstart(10 July 2001) saslserverstart(10 July 2001)

NAME
       saslserverstart - Begin an authentication negotiation



SYNOPSIS
       ##iinncclluuddee <>

       iinntt ssaassllsseerrvveerrssttaarrtt((ssaassllccoonnnntt ** conn,,
                            ccoonnsstt cchhaarr ** mech,,
                            ccoonnsstt cchhaarr ** clientin,,
                            uunnssiiggnneedd ** clientinlen,,
                            ccoonnsstt cchhaarr **** serverout,,
                            uunnssiiggnneedd ** serveroutlen));;

DESCRIPTION
       ssaassllsseerrvveerrssttaarrtt(()) begins the authentication with the mechanism speci-
       fied with mech. This fails if the mechanism is not  supported.  SASLOK
       is returned if the authentication is complete and the user is authenti-
       cated. SASLCONTINUE is  returned  if  one  or  more  steps  are  still
       required  in the authentication. All other return values indicate fail-
       ure.


       conn is the SASL context for this connection

       mech is the mechanism name that the client requested

       clientin is the client initial response, NULL  if  the  protocol  lacks
       support  for client-send-first or if the other end did not have an ini-
       tial send.  Note that no initial client send is distinct from  an  ini-
       tial send of a null string, and the protocol MUST account for this dif-
       ference.


       clientinlen is the length of initial response

       serverout is created by the plugin library. It is  the  initial  server
       response  to send to the client. This is allocated/freed by the library
       and it is the job of the client to send it  over  the  network  to  the
       server.  Also protocal specific encoding (such as base64 encoding) must
       needs to be done by the server.

       serveroutlen is set to the length of initial server challenge





RREETTUURRNN VVAALLUUEE
       saslserverstart returns an integer which corresponds to  one  of  the
       SASL  errorcodes.  SASLOK  indicates  that authentication is completed
       successfully. SASLCONTINUE indicates sucess and that  there  are  more
       steps  needed  in  the  authentication. All other return codes indicate
       errors and should either  be  handled  or  the  authentication  session
       should be quit.


CCOONNFFOORRMMIINNGG TTOO
       RFC 2222

SEE ALSO
       sasl(3),   saslerrors(3),   saslserverinit(3),   saslservernew(3),
       saslserverstep(3)



SASL man pages                       SASL      saslserverstart(10 July 2001)