This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
Generic Security Service Application Program Interface
Generic Security Service Application Program Interface

Version management

Difference between version and

At line 1 added 37 lines
!!! Overview
[{$pagename}] ([GSSAPI] or [GSS-API]) is an application programming interface for programs to access security services.
The GSSAPI is an [IETF] standard that addresses the problem of many similar but incompatible security services in use today.
The GSSAPI [SASL] [Mechanisms|Authentication Methods] provides a way for clients to [authentication] including using a [Kerberos] V5 session.
The [{$pagename}] is described in the following RFCs:
* [RFC 2078] [Generic Security Service Application Program Interface], Version 2
* [RFC 2743] The [Generic Security Service Application Program Interface] Version 2, Update 1.
* [RFC 2744] The [Generic Security Service Application Program Interface] Version 2 : C-bindings
* [RFC 1964] [The Kerberos Version 5 GSS-API Mechanism]
* [RFC 4121] [The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism|The Kerberos Version 5 GSS-API Mechanism]: Version 2
* [RFC 4178] [The Simple and Protected GSS-API Negotiation Mechanism|Simple and Protected GSSAPI Negotiation Mechanism] ([SPNEGO])
* [RFC 2025] [The Simple Public-Key GSS-API Mechanism] ([SPKM])
* [RFC 2847] - [LIPKEY] - [A Low Infrastructure Public Key Mechanism Using SPKM]
[RFC 4752], and a description of the exchange between the client and the server (as well as with the [Kerberos] [KDC]).
!! Relationship to [Kerberos][1]
The dominant [GSSAPI] mechanism implementation in use is [Kerberos].
Unlike the [GSSAPI], the [Kerberos] [API] has not been standardized and various existing implementations may use incompatible APIs.
The GSSAPI allows [Kerberos] implementations to be [API] compatible.
!! [Microsoft Active Directory]
[Microsoft Active Directory] supports [{$pagename}] through the [Security Support Provider Interface] which uses several [Security Support Providers]
!! [EDirectory]
[Configuring GSSAPI With Edirectory|Configuring GSSAPI With Edirectory]
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [http://en.wikipedia.org/wiki/Generic_Security_Services_Application_Program_Interface|http://en.wikipedia.org/wiki/Generic_Security_Services_Application_Program_Interface|target='_blank'] - based on 2013-04-10
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop