[27515] in Kerberos
Re: What is SPNEGO and GSSAPI / Kerberos
daemon@ATHENA.MIT.EDU (Jeffrey Hutzelman)
Thu Mar 1 14:21:53 2007
Date: Thu, 01 Mar 2007 14:21:30 -0500
From: Jeffrey Hutzelman <jhutz@cmu.edu>
To: Gayal <gayal.rupasinghe@gmail.com>, kerberos@mit.edu
Message-ID: <499FD881FC14CB8345E4B712@sirius.fac.cs.cmu.edu>
In-Reply-To: <927222550702282353r53538c50q1f01263c9f2f2b0e@mail.gmail.com>
MIME-Version: 1.0
Content-Disposition: inline
Cc: Jeffrey Hutzelman <jhutz@cmu.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thursday, March 01, 2007 01:23:19 PM +0530 Gayal
<gayal.rupasinghe@gmail.com> wrote:
> Who is officially governing the GSSAPI and SPNEGO standards? Is it IETF?
Yes. The current GSS-API spec is RFC2743, and its C language bindings are
specified in RFC2744 (which, unfortunately, also includes some details you
need to know even if you are not using C).
The Kerberos V GSS-API mechanism is specified in RFC1964 and RFC4121;
Kerberos itself is specified in RFC3961, RFC3962, and RFC4120.
SPNEGO is specified in RFC4178.
SPKM is specified in RFC2025 and in section 2 of RFC2847.
Note that the IETF is currently working on updates to both Kerberos and the
GSS-API; both have extensions defined in documents I haven't mentioned,
plus new versions of the base specifications that are in progress. This
work is being done in the Kerberos and Kitten working groups, respectively.
There is also work ongoing to select and develop a replacement for SPKM3,
this could turn out to be the proposed SPKM4 or one of the other proposals
currently under consideration. This work is proceeding on the
spkm@ietf.org mailing list.
SSPI and NTLMSSP are Microsoft-proprietary. Documentation is available for
both, but I can't tell you offhand where to find it.
-- Jeffrey T. Hutzelman (N3NHS) <jhutz+@cmu.edu>
Sr. Research Systems Programmer
School of Computer Science - Research Computing Facility
Carnegie Mellon University - Pittsburgh, PA
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
