Overview#

GS2 Mechanism Family (GS2) is defined in RFC 5801 and describes how to use a Generic Security Service Application Program Interface (GSS-API) mechanism in the Simple Authentication and Security Layer (SASL) framework.

This is done by defining a new SASL mechanism family, called GS2 Mechanism Family.

The GS2 Mechanism Family offers a number of improvements over the previous "SASL/ GSSAPI" mechanism: it is more general, uses fewer messages for the authentication phase in some cases, and supports negotiable use of channel binding.

Only GSS-API mechanisms that support channel binding and Mutual Authentication are supported.

More Information#

There might be more information for this subject on one of the following:

• GS2
• RFC 5801
• Simple and Protected GSSAPI Negotiation Mechanism