Authen::Krb5::Easy - Simple Kerberos 5 interaction

 use Authen::Krb5::Easy qw{kinit kexpires kexpired kcheck kdestroy};

 kinit("keytab", "someone") || die kerror();

 # how long until the ticket expires?
 $time_left = kexpires();

 # has the ticket expired?
 if(kexpired())
 {
 	print "expired!\n";
 }

 # check for expiration and get new ticket if expired
 kcheck("keytab", "someone") || die kerror();

 # destroy current ticket
 kdestroy();

This allows simple access to getting kerberos 5 ticket granting tickets using a keytab file.

All functions will need to be imported.

kinit($keytab, $principle)

This uses the keytab file specified in $keytab and uses it to acquire a ticket granting ticket for $principle. This is functionally equivalent to system("kinit -k -t $keytab $principle"), but is done directly through the kerberos libraries.

kdestroy()

Erases all credentials in the ticket file.

kerror()

returns an error string ended with a "\n" that describes what error happened.

kcheck($keytab, $principle)

Checks to see if the ticket has expired, and if it has, get a new one using $keytab and $principle.

kexpires()

Returns the seconds since the epoch that the ticket will expire or 0.

kexpired()

Returns true if the ticket has expired.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

Copyright 2002 Ed Schaller

Ed Schaller schallee@darkmist.net

kerberos(1), kinit(1), kdestroy(1), klist(1), perl(1).