diff --git a/lib/krb5/krb5_get_credentials.3 b/lib/krb5/krb5_get_credentials.3 index 9bbcb780e..6dd835f43 100644 --- a/lib/krb5/krb5_get_credentials.3 +++ b/lib/krb5/krb5_get_credentials.3 @@ -54,7 +54,7 @@ Kerberos 5 Library (libkrb5, -lkrb5) .Fa "krb5_creds **out_creds" .Fc .Ft krb5_error_code -.Fo krb5_get_credentials +.Fo krb5_get_credentials_with_flags .Fa "krb5_context context" .Fa "krb5_flags options" .Fa "krb5_kdc_flags flags" @@ -91,11 +91,23 @@ Kerberos 5 Library (libkrb5, -lkrb5) .Fc .Sh DESCRIPTION .Fn krb5_get_credentials_with_flags -get credentials by first looking in the +get credentials specified by +.Fa in_creds->server +and +.Fa in_creds->client +(the rest of the +.Fa in_creds +structure is ignored) +by first looking in the .Fa ccache and if doesn't exists or is expired, fetch the credential from the KDC using the krbtgt in .Fa ccache . +The credential is returned in +.Fa out_creds +and should be freed using the function +.Fn krb5_free_creds . +.Pp Valid flags to pass into .Fa options argument are: