aboutsummaryrefslogtreecommitdiff
path: root/lib
diff options
context:
space:
mode:
Diffstat (limited to 'lib')
-rw-r--r--lib/libgssapi/gss_accept_sec_context.36
-rw-r--r--lib/libgssapi/gss_acquire_cred.36
-rw-r--r--lib/libgssapi/gss_add_cred.36
-rw-r--r--lib/libgssapi/gss_add_oid_set_member.36
-rw-r--r--lib/libgssapi/gss_canonicalize_name.36
-rw-r--r--lib/libgssapi/gss_compare_name.38
-rw-r--r--lib/libgssapi/gss_context_time.36
-rw-r--r--lib/libgssapi/gss_create_empty_oid_set.36
-rw-r--r--lib/libgssapi/gss_delete_sec_context.36
-rw-r--r--lib/libgssapi/gss_display_name.36
-rw-r--r--lib/libgssapi/gss_display_status.38
-rw-r--r--lib/libgssapi/gss_duplicate_name.36
-rw-r--r--lib/libgssapi/gss_export_name.36
-rw-r--r--lib/libgssapi/gss_export_sec_context.36
-rw-r--r--lib/libgssapi/gss_get_mic.36
-rw-r--r--lib/libgssapi/gss_import_name.36
-rw-r--r--lib/libgssapi/gss_import_sec_context.36
-rw-r--r--lib/libgssapi/gss_indicate_mechs.36
-rw-r--r--lib/libgssapi/gss_init_sec_context.36
-rw-r--r--lib/libgssapi/gss_inquire_context.36
-rw-r--r--lib/libgssapi/gss_inquire_cred.36
-rw-r--r--lib/libgssapi/gss_inquire_cred_by_mech.36
-rw-r--r--lib/libgssapi/gss_inquire_mechs_for_name.36
-rw-r--r--lib/libgssapi/gss_inquire_names_for_mech.36
-rw-r--r--lib/libgssapi/gss_process_context_token.36
-rw-r--r--lib/libgssapi/gss_release_buffer.36
-rw-r--r--lib/libgssapi/gss_release_cred.36
-rw-r--r--lib/libgssapi/gss_release_name.36
-rw-r--r--lib/libgssapi/gss_release_oid_set.36
-rw-r--r--lib/libgssapi/gss_test_oid_set_member.36
-rw-r--r--lib/libgssapi/gss_unwrap.36
-rw-r--r--lib/libgssapi/gss_verify_mic.36
-rw-r--r--lib/libgssapi/gss_wrap.310
-rw-r--r--lib/libgssapi/gss_wrap_size_limit.36
-rw-r--r--lib/libgssapi/gssapi.32
-rw-r--r--lib/libgssapi/mech.510
36 files changed, 112 insertions, 112 deletions
diff --git a/lib/libgssapi/gss_accept_sec_context.3 b/lib/libgssapi/gss_accept_sec_context.3
index 825c28d04b88..cc368876e390 100644
--- a/lib/libgssapi/gss_accept_sec_context.3
+++ b/lib/libgssapi/gss_accept_sec_context.3
@@ -212,7 +212,7 @@ exist in version 1 of the GSS-API specification, so applications that
wish to run over version 1 implementations must special-case these
codes.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It input_chan_bindings"
.It context_handle
Context handle for new context.
Supply
@@ -400,7 +400,7 @@ Specify
Mechanism specific status code.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_DEFECTIVE_CREDENTIAL"
.It GSS_S_CONTINUE_NEEDED
Indicates that a token from the peer application is required to
complete the context,
@@ -442,7 +442,7 @@ the implementation or the provided credential.
.Xr gss_release_name 3 ,
.Xr gss_wrap 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_acquire_cred.3 b/lib/libgssapi/gss_acquire_cred.3
index 4b683e7c5794..0a6caada4bde 100644
--- a/lib/libgssapi/gss_acquire_cred.3
+++ b/lib/libgssapi/gss_acquire_cred.3
@@ -126,7 +126,7 @@ immediately following the call of
must return valid credential data,
and may therefore incur the overhead of a deferred credential acquisition.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It output_cred_handle"
.It desired_name
Name of principal whose credential should be acquired.
.It time_req
@@ -174,7 +174,7 @@ Specify NULL if not required.
Mechanism specific status code.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CREDENTIALS_EXPIRED"
.It GSS_S_COMPLETE
Successful completion.
.It GSS_S_BAD_MECH
@@ -196,7 +196,7 @@ No credentials were found for the specified name.
.Xr gss_release_cred 3 ,
.Xr gss_release_oid_set 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_add_cred.3 b/lib/libgssapi/gss_add_cred.3
index 67ff1c3dc74b..32d98859c04e 100644
--- a/lib/libgssapi/gss_add_cred.3
+++ b/lib/libgssapi/gss_add_cred.3
@@ -170,7 +170,7 @@ a non-
.Fa output_cred_handle
must be supplied.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It output_cred_handle"
.It minor_status
Mechanism specific status code.
.It input_cred_handle
@@ -270,7 +270,7 @@ Specify
if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CREDENTIALS_EXPIRED"
.It GSS_S_COMPLETE
Successful completion.
.It GSS_S_BAD_MECH
@@ -296,7 +296,7 @@ No credentials were found for the specified name.
.Xr gss_release_cred 3 ,
.Xr gss_release_oid_set 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_add_oid_set_member.3 b/lib/libgssapi/gss_add_oid_set_member.3
index 5839da6717cf..e812681442a4 100644
--- a/lib/libgssapi/gss_add_oid_set_member.3
+++ b/lib/libgssapi/gss_add_oid_set_member.3
@@ -71,7 +71,7 @@ the
.Fa oid_set
should remain unchanged.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It member_oid
@@ -80,7 +80,7 @@ The object identifier to copied into the set.
The set in which the object identifier should be inserted.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.El
@@ -88,7 +88,7 @@ Successful completion
.Xr gss_create_empty_oid_set 3 ,
.Xr gss_acquire_cred 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_canonicalize_name.3 b/lib/libgssapi/gss_canonicalize_name.3
index 036c0eff8245..71daad54d707 100644
--- a/lib/libgssapi/gss_canonicalize_name.3
+++ b/lib/libgssapi/gss_canonicalize_name.3
@@ -62,7 +62,7 @@ specifying
.Fa mech_type
as the authentication mechanism.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It input_name
@@ -79,7 +79,7 @@ after use with a call to
.Fn gss_release_name .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_BAD_NAMETYPE"
.It GSS_S_COMPLETE
Successful completion.
.It GSS_S_BAD_MECH
@@ -95,7 +95,7 @@ The provided internal name was ill-formed.
.Xr gss_init_sec_context 3 ,
.Xr gss_release_name 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_compare_name.3 b/lib/libgssapi/gss_compare_name.3
index 713af232da4a..0890cf924b0a 100644
--- a/lib/libgssapi/gss_compare_name.3
+++ b/lib/libgssapi/gss_compare_name.3
@@ -54,7 +54,7 @@ denotes an anonymous principal,
the routines should indicate that the two names do not refer to the
same identity.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width "minor_status"
.It minor_status
Mechanism specific status code.
.It name1
@@ -62,7 +62,7 @@ Internal-form name.
.It name2
Internal-form name.
.It name_equal
-.Bl -tag
+.Bl -tag -width "non-zero"
.It non-zero
Names refer to same entity
.It zero
@@ -71,7 +71,7 @@ to refer to the same identity).
.El
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_BAD_NAMETYPE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_BAD_NAMETYPE
@@ -80,7 +80,7 @@ The two names were of incomparable types.
One or both of name1 or name2 was ill-formed.
.El
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_context_time.3 b/lib/libgssapi/gss_context_time.3
index b6b4157dd947..4dae1d96e41f 100644
--- a/lib/libgssapi/gss_context_time.3
+++ b/lib/libgssapi/gss_context_time.3
@@ -47,7 +47,7 @@
Determines the number of seconds for which the specified context will
remain valid.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It context_handle"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -57,7 +57,7 @@ Number of seconds that the context will remain valid.
If the context has already expired, zero will be returned.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CONTEXT_EXPIRED"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_CONTEXT_EXPIRED
@@ -66,7 +66,7 @@ The context has already expired
The context_handle parameter did not identify a valid context
.El
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_create_empty_oid_set.3 b/lib/libgssapi/gss_create_empty_oid_set.3
index 3a84f855c152..466ea01873b6 100644
--- a/lib/libgssapi/gss_create_empty_oid_set.3
+++ b/lib/libgssapi/gss_create_empty_oid_set.3
@@ -51,7 +51,7 @@ These routines are intended to be used to construct sets of mechanism
object identifiers for input to
.Fn gss_acquire_cred .
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It oid_set
@@ -61,7 +61,7 @@ which the application must free after use with a call to
.Fn gss_release_oid_set .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.El
@@ -69,7 +69,7 @@ Successful completion
.Xr gss_add_oid_set_member 3 ,
.Xr gss_acquire_cred 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_delete_sec_context.3 b/lib/libgssapi/gss_delete_sec_context.3
index 1c4fa7b66909..be121655909c 100644
--- a/lib/libgssapi/gss_delete_sec_context.3
+++ b/lib/libgssapi/gss_delete_sec_context.3
@@ -88,7 +88,7 @@ mechanisms are encouraged to return a zero-length token,
indicating that no peer action is necessary,
and that no token should be transferred by the application.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It context_handle"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -110,7 +110,7 @@ field of this token to zero to indicate to the application that no
token is to be sent to the peer.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It context_handle"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_NO_CONTEXT
@@ -121,7 +121,7 @@ No valid context was supplied
.Xr gss_init_sec_context 3 ,
.Xr gss_accept_sec_context 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_display_name.3 b/lib/libgssapi/gss_display_name.3
index 4944995c4678..f22fcf5c2fa8 100644
--- a/lib/libgssapi/gss_display_name.3
+++ b/lib/libgssapi/gss_display_name.3
@@ -76,7 +76,7 @@ via the
.Fa output_name_type
parameter.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It output_name_buffer"
.It minor_status
Mechanism specific status code.
.It input_name
@@ -98,7 +98,7 @@ Specify
if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_BAD_NAME
@@ -109,7 +109,7 @@ was ill-formed
.Xr gss_import_name 3 ,
.Xr gss_release_buffer 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_display_status.3 b/lib/libgssapi/gss_display_status.3
index 4bf908bb1d0f..7c05e62cccad 100644
--- a/lib/libgssapi/gss_display_status.3
+++ b/lib/libgssapi/gss_display_status.3
@@ -111,13 +111,13 @@ do {
} while (message_context != 0);
.Ed
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It status_value
Status value to be converted
.It status_type
-.Bl -tag
+.Bl -tag -width ".It GSS_C_MECH_CODE"
.It GSS_C_GSS_CODE
.Fa status_value
is a GSS status code
@@ -153,7 +153,7 @@ application after use with a call to
.Fn gss_release_buffer .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_BAD_STATUS"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_BAD_MECH
@@ -168,7 +168,7 @@ nor
.Sh SEE ALSO
.Xr gss_release_buffer 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_duplicate_name.3 b/lib/libgssapi/gss_duplicate_name.3
index 5eb4a6284c41..f9c9f8344328 100644
--- a/lib/libgssapi/gss_duplicate_name.3
+++ b/lib/libgssapi/gss_duplicate_name.3
@@ -57,7 +57,7 @@ and
must both be released,
and the release of one shall not affect the validity of the other).
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It src_name
@@ -70,7 +70,7 @@ after use with a call to
.Fn gss_release_name .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_BAD_NAME
@@ -81,7 +81,7 @@ parameter was ill-formed
.Sh SEE ALSO
.Xr gss_release_name 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_export_name.3 b/lib/libgssapi/gss_export_name.3
index 5cbf803b9496..f727c4520fee 100644
--- a/lib/libgssapi/gss_export_name.3
+++ b/lib/libgssapi/gss_export_name.3
@@ -58,7 +58,7 @@ parameter must specify a valid MN
or by
.Fn gss_canonicalize_name ).
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It exported_name"
.It minor_status
Mechanism specific status code.
.It input_name
@@ -71,7 +71,7 @@ after use with
.Fn gss_release_buffer .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_BAD_NAMETYPE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_NAME_NOT_MN
@@ -86,7 +86,7 @@ The internal name was of a type not supported by the GSS-API implementation.
.Xr gss_canonicalize_name 3 ,
.Xr gss_release_buffer 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_export_sec_context.3 b/lib/libgssapi/gss_export_sec_context.3
index 7ecbef317172..ca1aedd68fd8 100644
--- a/lib/libgssapi/gss_export_sec_context.3
+++ b/lib/libgssapi/gss_export_sec_context.3
@@ -100,7 +100,7 @@ providing it also sets the
parameter to
.Dv GSS_C_NO_CONTEXT .
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It interprocess_token"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -112,7 +112,7 @@ after use with a call to
.Fn gss_release_buffer .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CONTEXT_EXPIRED"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_CONTEXT_EXPIRED
@@ -126,7 +126,7 @@ The operation is not supported
.Xr gss_import_sec_context 3 ,
.Xr gss_release_buffer 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_get_mic.3 b/lib/libgssapi/gss_get_mic.3
index e5d81fa77f4e..431f9e3f8061 100644
--- a/lib/libgssapi/gss_get_mic.3
+++ b/lib/libgssapi/gss_get_mic.3
@@ -81,7 +81,7 @@ both to allow GSS-API V1 applications to link
and to retain the slight parameter type differences between the
obsolete versions of this routine and its current form.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It message_buffer"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -109,7 +109,7 @@ use with a call to
.Fn gss_release_buffer .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CONTEXT_EXPIRED"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_CONTEXT_EXPIRED
@@ -123,7 +123,7 @@ The specified QOP is not supported by the mechanism
.Xr gss_wrap 3 ,
.Xr gss_release_buffer 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_import_name.3 b/lib/libgssapi/gss_import_name.3
index aef1ae8cb100..df3ce9cc0d04 100644
--- a/lib/libgssapi/gss_import_name.3
+++ b/lib/libgssapi/gss_import_name.3
@@ -59,7 +59,7 @@ parameter is of type
in which case the returned internal name will be an MN for the
mechanism that exported the name.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It input_name_buffer"
.It minor_status
Mechanism specific status code.
.It input_name_buffer
@@ -78,7 +78,7 @@ after use with a call to
.Fn gss_release_name .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width "It GSS_S_BAD_NAMETYPE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_BAD_NAMETYPE
@@ -97,7 +97,7 @@ but the mechanism contained within the input-name is not supported
.Sh SEE ALSO
.Xr gss_release_name 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_import_sec_context.3 b/lib/libgssapi/gss_import_sec_context.3
index 87aaa7872c70..b2e1c783bacb 100644
--- a/lib/libgssapi/gss_import_sec_context.3
+++ b/lib/libgssapi/gss_import_sec_context.3
@@ -50,7 +50,7 @@ A given interprocess token may be imported only once.
See
.Fn gss_export_sec_context .
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It interprocess_token"
.It minor_status
Mechanism specific status code.
.It interprocess_token
@@ -62,7 +62,7 @@ application after use with a call to
.Fn gss_delete_sec_context .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_DEFECTIVE_TOKEN"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_NO_CONTEXT
@@ -78,7 +78,7 @@ Local policy prevents the import of this context by the current process
.Xr gss_export_sec_context 3 ,
.Xr gss_delete_sec_context 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_indicate_mechs.3 b/lib/libgssapi/gss_indicate_mechs.3
index 3eec8615a171..c49c83a30227 100644
--- a/lib/libgssapi/gss_indicate_mechs.3
+++ b/lib/libgssapi/gss_indicate_mechs.3
@@ -46,7 +46,7 @@
Allows an application to determine which underlying security
mechanisms are available.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It mech_set
@@ -58,14 +58,14 @@ that should be released by the caller after use with a call to
.Fn gss_release_oid_set .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.El
.Sh SEE ALSO
.Xr gss_release_oid_set 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_init_sec_context.3 b/lib/libgssapi/gss_init_sec_context.3
index 9d14859fb41f..51556a613347 100644
--- a/lib/libgssapi/gss_init_sec_context.3
+++ b/lib/libgssapi/gss_init_sec_context.3
@@ -233,7 +233,7 @@ exist in version 1 of the GSS-API specification, so applications that
wish to run over version 1 implementations must special-case these
codes.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It initiator_cred_handle"
.It minor_status
Mechanism specific status code.
.It initiator_cred_handle
@@ -475,7 +475,7 @@ not support context expiration, the value
.Dv NULL if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CREDENTIALS_EXPIRED"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_CONTINUE_NEEDED
@@ -529,7 +529,7 @@ implementation.
.Xr gss_release_buffer 3 ,
.Xr gss_wrap 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_inquire_context.3 b/lib/libgssapi/gss_inquire_context.3
index ba5d649facd3..d31823427df0 100644
--- a/lib/libgssapi/gss_inquire_context.3
+++ b/lib/libgssapi/gss_inquire_context.3
@@ -55,7 +55,7 @@ The caller must already have obtained a handle that refers to the
context,
although the context need not be fully established.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It locally_initiated"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -229,7 +229,7 @@ Specify
if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_NO_CONTEXT"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_NO_CONTEXT
@@ -242,7 +242,7 @@ The referenced context could not be accessed
.Xr gss_get_mic 3 ,
.Xr gss_export_sec_context 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_inquire_cred.3 b/lib/libgssapi/gss_inquire_cred.3
index 923b3734bea1..8bbe0da4ca89 100644
--- a/lib/libgssapi/gss_inquire_cred.3
+++ b/lib/libgssapi/gss_inquire_cred.3
@@ -50,7 +50,7 @@
.Sh DESCRIPTION
Obtains information about a credential.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It cred_handle
@@ -99,7 +99,7 @@ Specify
if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_DEFECTIVE_CREDENTIAL"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_NO_CRED
@@ -116,7 +116,7 @@ it will be set to 0
.Xr gss_release_name 3 ,
.Xr gss_release_oid_set 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_inquire_cred_by_mech.3 b/lib/libgssapi/gss_inquire_cred_by_mech.3
index c316930cffbc..ebe619698961 100644
--- a/lib/libgssapi/gss_inquire_cred_by_mech.3
+++ b/lib/libgssapi/gss_inquire_cred_by_mech.3
@@ -50,7 +50,7 @@
.Sh DESCRIPTION
Obtains per-mechanism information about a credential.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It initiator_lifetime"
.It minor_status
Mechanism specific status code.
.It cred_handle
@@ -114,7 +114,7 @@ Specify
if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_DEFECTIVE_CREDENTIAL"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_NO_CRED
@@ -130,7 +130,7 @@ it will be set to 0.
.Sh SEE ALSO
.Xr gss_release_name 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_inquire_mechs_for_name.3 b/lib/libgssapi/gss_inquire_mechs_for_name.3
index d8d94edb4820..661f9ac6a4fa 100644
--- a/lib/libgssapi/gss_inquire_mechs_for_name.3
+++ b/lib/libgssapi/gss_inquire_mechs_for_name.3
@@ -68,7 +68,7 @@ type).
Thus this routine should be used only as a pre-filter for a call to a
subsequent mechanism-specific routine.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It input_name
@@ -80,7 +80,7 @@ to
.Fn gss_release_oid_set .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_BAD_NAME
@@ -91,7 +91,7 @@ parameter was ill-formed
.Sh SEE ALSO
.Xr gss_release_oid_set 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_inquire_names_for_mech.3 b/lib/libgssapi/gss_inquire_names_for_mech.3
index c1b7528b56e0..591ddb9c1b42 100644
--- a/lib/libgssapi/gss_inquire_names_for_mech.3
+++ b/lib/libgssapi/gss_inquire_names_for_mech.3
@@ -46,7 +46,7 @@
.Sh DESCRIPTION
Returns the set of name-types supported by the specified mechanism.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It mechanism
@@ -58,14 +58,14 @@ call to
.Fn gss_release_oid_set .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width "GSS_S_COMPLETEXX"
.It GSS_S_COMPLETE
Successful completion
.El
.Sh SEE ALSO
.Xr gss_release_oid_set 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_process_context_token.3 b/lib/libgssapi/gss_process_context_token.3
index 53f5ebfcc533..a7e0ab4c8343 100644
--- a/lib/libgssapi/gss_process_context_token.3
+++ b/lib/libgssapi/gss_process_context_token.3
@@ -71,7 +71,7 @@ believing that the context is fully established.
.Fn gss_process_context_token
provides a way to pass such a token to the mechanism at any time.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It context_handle"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -80,7 +80,7 @@ Context handle of context on which token is to be processed.
Token to process.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_DEFECTIVE_TOKEN"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_DEFECTIVE_TOKEN
@@ -94,7 +94,7 @@ did not refer to a valid context
.Xr gss_init_sec_context 3 ,
.Xr gss_accept_sec_context 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_release_buffer.3 b/lib/libgssapi/gss_release_buffer.3
index c4acf81faf49..d71a6f23b2c4 100644
--- a/lib/libgssapi/gss_release_buffer.3
+++ b/lib/libgssapi/gss_release_buffer.3
@@ -55,7 +55,7 @@ Any buffer object returned by a GSS-API routine may be passed to
.Fn gss_release_buffer
(even if there is no storage associated with the buffer).
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It buffer
@@ -64,12 +64,12 @@ The gss_buffer_desc object will not be freed,
but its length field will be zeroed.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.El
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_release_cred.3 b/lib/libgssapi/gss_release_cred.3
index 38fc7844bea8..99377e5fade3 100644
--- a/lib/libgssapi/gss_release_cred.3
+++ b/lib/libgssapi/gss_release_cred.3
@@ -50,7 +50,7 @@ Implementations are encouraged to set the cred_handle to
.Dv GSS_C_NO_CREDENTIAL
on successful completion of this call.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It cred_handle
@@ -59,14 +59,14 @@ If GSS_C_NO_CREDENTIAL is supplied,
the routine will complete successfully, but will do nothing.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_NO_CRED
Credentials could not be accessed
.El
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_release_name.3 b/lib/libgssapi/gss_release_name.3
index ca737e0af3ab..b6f046e87e38 100644
--- a/lib/libgssapi/gss_release_name.3
+++ b/lib/libgssapi/gss_release_name.3
@@ -48,21 +48,21 @@ Implementations are encouraged to set the name to
.Dv GSS_C_NO_NAME
on successful completion of this call.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor status"
.It minor_status
Mechanism specific status code.
.It name
The name to be deleted.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_BAD_NAME
The name parameter did not contain a valid name
.El
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_release_oid_set.3 b/lib/libgssapi/gss_release_oid_set.3
index 7de4e9ae195d..668581629a3d 100644
--- a/lib/libgssapi/gss_release_oid_set.3
+++ b/lib/libgssapi/gss_release_oid_set.3
@@ -55,19 +55,19 @@ Implementations are encouraged to set the gss_OID_set parameter to
.Dv GSS_C_NO_OID_SET
on successful completion of this routine.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It set
The storage associated with the gss_OID_set will be deleted.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.El
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_test_oid_set_member.3 b/lib/libgssapi/gss_test_oid_set_member.3
index c6dad0f2fe76..5588e8a66bd6 100644
--- a/lib/libgssapi/gss_test_oid_set_member.3
+++ b/lib/libgssapi/gss_test_oid_set_member.3
@@ -54,7 +54,7 @@ and
.Fn gss_inquire_cred ,
but will also work with user-generated sets.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It minor_status"
.It minor_status
Mechanism specific status code.
.It member
@@ -65,7 +65,7 @@ The Object Identifier set.
Non-zero if the specified OID is a member of the set, zero if not.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_COMPLETE"
.It GSS_S_COMPLETE
Successful completion
.El
@@ -74,7 +74,7 @@ Successful completion
.Xr gss_acquire_cred 3 ,
.Xr gss_inquire_cred 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_unwrap.3 b/lib/libgssapi/gss_unwrap.3
index cc241f89ffdd..368b361efebc 100644
--- a/lib/libgssapi/gss_unwrap.3
+++ b/lib/libgssapi/gss_unwrap.3
@@ -90,7 +90,7 @@ both to allow GSS-API V1 applications to link
and to retain the slight parameter type differences between the
obsolete versions of this routine and its current form.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It output_message_buffer"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -116,7 +116,7 @@ Specify NULL if not required.
Quality of protection provided. Specify NULL if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CONTEXT_EXPIRED"
.It GSS_S_COMPLETE
Successful completion.
.It GSS_S_DEFECTIVE_TOKEN
@@ -150,7 +150,7 @@ The context_handle parameter did not identify a valid context.
.Xr gss_wrap 3 ,
.Xr gss_release_buffer 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_verify_mic.3 b/lib/libgssapi/gss_verify_mic.3
index e8a46119422b..ae7cee2a83bb 100644
--- a/lib/libgssapi/gss_verify_mic.3
+++ b/lib/libgssapi/gss_verify_mic.3
@@ -81,7 +81,7 @@ both to allow GSS-API V1 applications to link
and to retain the slight parameter type differences between the
obsolete versions of this routine and its current form.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It context_handle"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -97,7 +97,7 @@ Specify
if not required.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CONTEXT_EXPIRED"
.It GSS_S_COMPLETE
Successful completion
.It GSS_S_DEFECTIVE_TOKEN
@@ -130,7 +130,7 @@ The context_handle parameter did not identify a valid context
.Sh SEE ALSO
.Xr gss_wrap 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_wrap.3 b/lib/libgssapi/gss_wrap.3
index 5bf9cc26ba59..edc134583698 100644
--- a/lib/libgssapi/gss_wrap.3
+++ b/lib/libgssapi/gss_wrap.3
@@ -85,13 +85,13 @@ both to allow GSS-API V1 applications to link
and to retain the slight parameter type differences between the
obsolete versions of this routine and its current form.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It output_message_buffer"
.It minor_status
Mechanism specific status code.
.It context_handle
Identifies the context on which the message will be sent.
.It conf_req_flag
-.Bl -tag -width "Non-zero"
+.Bl -tag -width "Non-zero" -compact
.It Non-zero
Both confidentiality and integrity services are requested.
.It Zero
@@ -108,7 +108,7 @@ will return a major_status of
.It input_message_buffer
Message to be protected.
.It conf_state
-.Bl -tag -width "Non-zero"
+.Bl -tag -width "Non-zero" -compact
.It Non-zero
Confidentiality, data origin authentication and integrity services
have been applied.
@@ -123,7 +123,7 @@ with a call to
.Xr gss_release_buffer 3 .
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CONTEXT_EXPIRED"
.It GSS_S_COMPLETE
Successful completion.
.It GSS_S_CONTEXT_EXPIRED
@@ -137,7 +137,7 @@ The specified QOP is not supported by the mechanism.
.Xr gss_unwrap 3 ,
.Xr gss_release_buffer 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gss_wrap_size_limit.3 b/lib/libgssapi/gss_wrap_size_limit.3
index 7a1cb599ad20..afbff8648120 100644
--- a/lib/libgssapi/gss_wrap_size_limit.3
+++ b/lib/libgssapi/gss_wrap_size_limit.3
@@ -83,7 +83,7 @@ the implementation should not return a value via
.Dv max_input_bytes
that is greater than this length.
.Sh PARAMETERS
-.Bl -tag
+.Bl -tag -width ".It req_output_size"
.It minor_status
Mechanism specific status code.
.It context_handle
@@ -109,7 +109,7 @@ be no larger than
bytes.
.El
.Sh RETURN VALUES
-.Bl -tag
+.Bl -tag -width ".It GSS_S_CONTEXT_EXPIRED"
.It GSS_S_COMPLETE
Successful completion.
.It GSS_S_NO_CONTEXT
@@ -122,7 +122,7 @@ The specified QOP is not supported by the mechanism.
.Sh SEE ALSO
.Xr gss_wrap 3
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/gssapi.3 b/lib/libgssapi/gssapi.3
index 121d9e42e6e6..d41595e48b9a 100644
--- a/lib/libgssapi/gssapi.3
+++ b/lib/libgssapi/gssapi.3
@@ -219,7 +219,7 @@ functionality is not available from the generic forms.
Applications are encouraged to use the generic routines wherever
possible on portability grounds.
.Sh STANDARDS
-.Bl -tag
+.Bl -tag -width ".It RFC 2743"
.It RFC 2743
Generic Security Service Application Program Interface Version 2, Update 1
.It RFC 2744
diff --git a/lib/libgssapi/mech.5 b/lib/libgssapi/mech.5
index b56565e3d15d..dd15ba98938c 100644
--- a/lib/libgssapi/mech.5
+++ b/lib/libgssapi/mech.5
@@ -39,17 +39,17 @@ The
file contains a list of installed GSS-API security mechanisms.
Each line of the file either contains a comment if the first character
is '#' or it contains five fields with the following meanings:
-.Bl -tag
+.Bl -tag -width ".It Object identifier"
.It Name
The name of this GSS-API mechanism.
.It Object identifier
The OID for this mechanism.
.It Library
A shared library containing the implementation of this mechanism.
-.It Kernel module (optional)
-A kernel module containing the implementation of this mechanism (not
+.It Kernel module
+Optional kernel module containing the implementation of this mechanism (not
yet supported in FreeBSD).
-.It Library options (optional)
+.It Library options
Optional parameters interpreted by the mechanism. Library options
must be enclosed in brackets ([ ]) to differentiate them from the
optional kernel module entry.
@@ -68,7 +68,7 @@ file contains a list of Quality of Protection values for use with
GSS-API.
Each line of the file either contains a comment if the first character
is '#' or it contains three fields with the following meanings:
-.Bl -tag
+.Bl -tag -width ".It Mechanism name"
.It QOP string
The name of this Quality of Protection algorithm.
.It QOP value