
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@11668 ec53bebd-3082-4978-b11e-865c3cabbd6b
55 lines
1.3 KiB
Groff
55 lines
1.3 KiB
Groff
.\" $Id$
|
|
.\"
|
|
.Dd January 23, 2003
|
|
.Dt GSSAPI 3
|
|
.Os
|
|
.Sh NAME
|
|
.Nm gssapi
|
|
.Nd Generic Security Service Application Program Interface library
|
|
.Sh LIBRARY
|
|
GSS-API Library (libgssapi, -lgssapi)
|
|
.Sh DESCRIPTION
|
|
The Generic Security Service Application Program Interface (GSS-API)
|
|
provides security services to callers in a generic fashion,
|
|
supportable with a range of underlying mechanisms and technologies and
|
|
hence allowing source-level portability of applications to different
|
|
environments.
|
|
.Sh COMPATIBILITY
|
|
The
|
|
.Nm Heimdal
|
|
.Nm
|
|
implementation had a bug in releases before 0.6 that made it fail to
|
|
inter-operate with other
|
|
.Nm
|
|
implementations when using
|
|
.Fn gss_get_mic
|
|
/
|
|
.Fn gss_verify_mic .
|
|
.Pp
|
|
To turn on compatibility with older clients and servers, change the
|
|
.Nm [gssapi]
|
|
.Ar broken_3des_mic
|
|
in
|
|
.Pa krb5.conf
|
|
that contains a list of globbing expressions that will be matched
|
|
against the server name.
|
|
This config option modifies behaviour for both clients and servers.
|
|
.Pp
|
|
Example:
|
|
.Bd -literal -offset indent
|
|
[gssapi]
|
|
broken_3des_mic = cvs/*@SU.SE
|
|
broken_3des_mic = host/*@SU.SE afs/*@SU.SE
|
|
.Ed
|
|
.Sh BUGS
|
|
All of 0.5.x versions of
|
|
.Nm heimdal
|
|
had broken token delegations in the client side, the server side was
|
|
correct.
|
|
.\" .Sh LIST OF FUNCTIONS
|
|
.\"
|
|
.Sh SEE ALSO
|
|
.Xr krb5 3 ,
|
|
.Xr krb5.conf 5 ,
|
|
.Xr kerberos 8
|