<!--
{
  "documentType" : "article",
  "framework" : "GSS",
  "identifier" : "/documentation/GSS/kerberos-implementation",
  "metadataVersion" : "0.1.0",
  "role" : "collectionGroup",
  "title" : "Kerberos Implementation"
}
-->

# Kerberos Implementation

Establish secure connections using the Kerberos implementation of GSS-API.

## Topics

### Contexts and Keys

[`gss_krb5_cfx_keydata_t`](/documentation/GSS/gss_krb5_cfx_keydata_t)

The structure of a Kerberos context and acceptor-asserted key.

[`gss_krb5_lucid_context_v1_t`](/documentation/GSS/gss_krb5_lucid_context_v1_t)

The structure of a Kerberos context.

[`gss_krb5_lucid_context_version_t`](/documentation/GSS/gss_krb5_lucid_context_version_t)

The structure for determining the returned Kerberos lucid context structure version.

[`gss_krb5_lucid_key_t`](/documentation/GSS/gss_krb5_lucid_key_t)

The structure for a Kerberos encryption key.

[`gss_krb5_rfc1964_keydata_t`](/documentation/GSS/gss_krb5_rfc1964_keydata_t)

The structure for an RFC 1964-compliant Kerberos encryption key.

### Identity and Settings

[`gss_krb5_export_lucid_sec_context`](/documentation/GSS/gss_krb5_export_lucid_sec_context(_:_:_:_:))

Returns a non-opaque version of the internal context information.

[`gsskrb5_extract_authz_data_from_sec_context`](/documentation/GSS/gsskrb5_extract_authz_data_from_sec_context(_:_:_:_:))

Extracts Kerberos authorization data stored within the context.

[`gss_krb5_ccache_name`](/documentation/GSS/gss_krb5_ccache_name(_:_:_:))

Sets the internal Kerberos 5 credential cache name.

[`gss_krb5_free_lucid_sec_context`](/documentation/GSS/gss_krb5_free_lucid_sec_context(_:_:))

Frees allocated storage associated with an exported context.

[`gss_krb5_set_allowable_enctypes`](/documentation/GSS/gss_krb5_set_allowable_enctypes(_:_:_:_:))

Limits the keys that can be exported to the specified types.

[`gsskrb5_register_acceptor_identity`](/documentation/GSS/gsskrb5_register_acceptor_identity(_:))

Sets the Kerberos 5 file-based key that the acceptor will use.

[`krb5_gss_register_acceptor_identity`](/documentation/GSS/krb5_gss_register_acceptor_identity(_:))

Sets the Kerberos 5 file-based key that the acceptor will use.

[`gss_krb5_copy_ccache`](/documentation/GSS/gss_krb5_copy_ccache(_:_:_:))

Copies Kerberos 5 credentials into the passed cache.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)