NAME
Authen::Krb5::KDB - Parse Kerberos V5 database dumps
SYNOPSIS
use Authen::Krb5::KDB;
$db = Authen::Krb5::KDB->new( file => 'slave_datatrans' );
while ($p = $db->next) {
print "Found" if ($p->name eq 'foo@TEST.ORG');
}
$db->close;
use Authen::Krb5::KDB;
$db = Authen::Krb5::KDB->new( realm => 'TEST.ORG' );
$db->read;
$db->close;
$policies = $db->policies;
foreach my $p (@{$policies}) {
$p->print_policy;
}
DESCRIPTION
Constructor and methods to parse Kerberos V5 database files, either directly from kerberos (via kdb5_util) or from already dumped files (e.g. slave_datatrans).
- new()
-
Open the database file and return a new database object. You can either read from a file or read directly from Kerberos (done via "kdb5_util -r <realm> dump |"; this is the default).
Arguments are:
realm => <realm_name>
The realm which should be extracted via kdb5_util. This is ignored if you use the file argument.
file => <filename>
Read from a file instead of Kerberos directly.
checks => <level>
Data checking level. Level 0 means no checks; level 1 (the default) does basic checks like checking that the lengths in the records are correct; level 2 does much further consistency checks on the data.
save => 1
Save the principal objects in the database object. Normally the objects are not saved for space considerations. Note that policy objects are always kept.
- next()
-
Returns the next principal or policy object.
- read()
-
Reads all principals and policies. The objects are saved in the database object.
- principals()
-
Returns a reference to array of principal objects
- policies()
-
Returns a reference to array of policy objects
- close()
-
Closes FH to database. It's especially important to call
close
when reading directly via kdb5_util to make sure there are no errors from the pipe.
AUTHOR
Dave Steiner, <steiner@bakerst.rutgers.edu>
COPYRIGHT
Copyright (c) 2002 David K. Steiner. All rights reserved.
This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.
SEE ALSO
perl(1), kerberos(1), Authen::Krb5::KDB::V5, Authen::Krb5::KDB::V4, Authen::Krb5::KDB::V3, Authen::Krb5::KDB::V2, Authen::Krb5::KDB_H.