oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

add gssapi COMPATIBILITY documentation

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11618 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2003-01-27 14:04:27 +00:00
parent f9ab95a942
commit 0897487f98
2 changed files with 98 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

49
lib/gssapi/gssapi.3 Normal file
View File

@@ -0,0 +1,49 @@
.\" $Id$
.\"
.Dd January 23, 2003
.Dt GSSAPI 3
.Os
.Sh NAME
.Nm gssapi
.Nd Generic Security Service Application Program Interface library
.Sh LIBRARY
GSS-API Library (libgssapi, -lgssapi)
.Sh DESCRIPTION
The Generic Security Service Application Program Interface (GSS-API)
provides security services to callers in a generic fashion,
supportable with a range of underlying mechanisms and technologies and
hence allowing source-level portability of applications to different
environments.
.Sh COMPATIBILITY
The
.Nm Heimdal
.Nm
implementation had a bug in releases before 0.6 that made it fail to
inter-operate with other
.Nm
implementations when using
.Fn gss_get_mic
/
.Fn gss_verify_mic .
.Pp
To turn on compatibility with older clients and servers, change the
.Nm [gssapi]
.Ar broken_3des_mic
in
.Pa krb5.conf
that contains a list of globbing expressions that will be matched
against the server name.
This config option modifies behaviour for both clients and servers.
.Pp
Example:
.Bd -literal -offset indent
[gssapi]
broken_3des_mic = cvs/*@SU.SE
broken_3des_mic = host/*@SU.SE afs/*@SU.SE
.Ed
.\" .Sh LIST OF FUNCTIONS
.\"
.Sh SEE ALSO
.Xr krb5 3 ,
.Xr krb5.conf 5 ,
.Xr kerberos 8

49
lib/gssapi/krb5/gssapi.3 Normal file
View File

@@ -0,0 +1,49 @@
.\" $Id$
.\"
.Dd January 23, 2003
.Dt GSSAPI 3
.Os
.Sh NAME
.Nm gssapi
.Nd Generic Security Service Application Program Interface library
.Sh LIBRARY
GSS-API Library (libgssapi, -lgssapi)
.Sh DESCRIPTION
The Generic Security Service Application Program Interface (GSS-API)
provides security services to callers in a generic fashion,
supportable with a range of underlying mechanisms and technologies and
hence allowing source-level portability of applications to different
environments.
.Sh COMPATIBILITY
The
.Nm Heimdal
.Nm
implementation had a bug in releases before 0.6 that made it fail to
inter-operate with other
.Nm
implementations when using
.Fn gss_get_mic
/
.Fn gss_verify_mic .
.Pp
To turn on compatibility with older clients and servers, change the
.Nm [gssapi]
.Ar broken_3des_mic
in
.Pa krb5.conf
that contains a list of globbing expressions that will be matched
against the server name.
This config option modifies behaviour for both clients and servers.
.Pp
Example:
.Bd -literal -offset indent
[gssapi]
broken_3des_mic = cvs/*@SU.SE
broken_3des_mic = host/*@SU.SE afs/*@SU.SE
.Ed
.\" .Sh LIST OF FUNCTIONS
.\"
.Sh SEE ALSO
.Xr krb5 3 ,
.Xr krb5.conf 5 ,
.Xr kerberos 8