.\" $Id$
.\"
.Dd January 23, 2003
.Dt GSSAPI 3
.Os
.Sh NAME
.Nm gssapi
.Nd Generic Security Service Application Program Interface library
.Sh LIBRARY
GSS-API Library (libgssapi, -lgssapi)
.Sh DESCRIPTION
The Generic Security Service Application Program Interface (GSS-API)
provides security services to callers in a generic fashion,
supportable with a range of underlying mechanisms and technologies and
hence allowing source-level portability of applications to different
environments.
.Sh COMPATIBILITY
The
.Nm Heimdal
.Nm
implementation had a bug in releases before 0.6 that made it fail to
inter-operate with other
.Nm
implementations when using
.Fn gss_get_mic
/
.Fn gss_verify_mic .
.Pp
To turn on compatibility with older clients and servers, change the
.Nm [gssapi]
.Ar broken_3des_mic
in
.Pa krb5.conf
that contains a list of globbing expressions that will be matched
against the server name.
This config option modifies behaviour for both clients and servers.
.Pp
Example:
.Bd -literal -offset indent
[gssapi]
	broken_3des_mic = cvs/*@SU.SE
	broken_3des_mic = host/*@SU.SE afs/*@SU.SE
.Ed
.Sh BUGS
All of 0.5.x versions of
.Nm heimdal
had broken token delegations in the client side, the server side was
correct.
.\" .Sh LIST OF FUNCTIONS
.\"
.Sh SEE ALSO
.Xr krb5 3 ,
.Xr krb5.conf 5 ,
.Xr kerberos 8