Authen::Krb5::Easy - Simple Kerberos 5 interaction

NAME

Authen::Krb5::Easy - Simple Kerberos 5 interaction

SYNOPSIS

 use Authen::Krb5::Easy qw{kinit kexpires kexpired kcheck kdestroy};

 kinit("keytab", "someone") || die kerror();

 # how long until the ticket expires?
 $time_left = kexpires();

 # has the ticket expired?
 if(kexpired())
 {
        print "expired!\n";
 }

 # check for expiration and get new ticket if expired
 kcheck("keytab", "someone") || die kerror();

 # destroy current ticket
 kdestroy();

This allows simple access to getting kerberos 5 ticket granting tickets using a keytab file.

All functions will need to be imported.

kinit($keytab, $principle): This uses the keytab file specified in $keytab and uses it to acquire a ticket granting ticket for $principle. This is functionally equivalent to system(``kinit -k -t $keytab $principle''), but is done directly through the kerberos libraries.
kdestroy(): Erases all credentials in the ticket file.
kerror(): returns an error string ended with a ``\n'' that describes what error happened.
kcheck($keytab, $principle): Checks to see if the ticket has expired, and if it has, get a new one using $keytab and $principle.
kexpires(): Returns the seconds since the epoch that the ticket will expire or 0.
kexpired(): Returns true if the ticket has expired.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.