|
Hopefully, this page is exactly what you are looking for, but if not, you can always find further assistance on Unix/Linux Forum!
Standards, Environments, and Macros gss_auth_rules(5)
NAME
gss_auth_rules - overview of GSS authorization
DESCRIPTION
The establishment of the veracity of a user's credentials
requires both authentication (Is this an authentic user?)
and authorization (Is this authentic user, in fact, author-
ized?).
When a user makes use of Generic Security Services (GSS)
versions of the ftp or ssh clients to connect to a server,
the user is not necessarily authorized, even if his claimed
GSS identity is authenticated, Authentication merely estab-
lishes that the user is who he says he is to the GSS
mechanism's authentication system. Authorization is then
required: it determines whether the GSS identity is permit-
ted to access the specified Solaris user account.
The GSS authorization rules are as follows:
o If the mechanism of the connection has a set of author-
ization rules, then use those rules. For example, if
the mechanism is Kerberos, then use the
krb5_auth_rules(5), so that authorization is consistent
between raw Kerberos applications and GSS/Kerberos
applications.
o If the mechanism of the connection does not have a set
of authorization rules, then authorization is success-
ful if the remote user's gssname matches the local
user's gssname exactly, as compared by
gss_compare_name(3GSS).
FILES
/etc/passwd
System account file. This information may also be in a
directory service. See passwd(4).
ATTRIBUTES
See attributes(5) for a description of the following attri-
butes:
____________________________________________________________
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
|_____________________________|_____________________________|
| Interface Stability | Evolving |
|_____________________________|_____________________________|
SunOS 5.10 Last change: 13 Apr 2004 1
Standards, Environments, and Macros gss_auth_rules(5)
SEE ALSO
ftp(1), ssh(1), gsscred(1M), gss_compare_name(3GSS),
passwd(4), attributes(5), krb5_auth_rules(5)
SunOS 5.10 Last change: 13 Apr 2004 2
Man(1) output converted with
man2html and wrapped by fishsponge
This page was generated on Wed Sep 12 11:27:48 GMT 2007
|
Your favourite pages:
No pages logged yet. Trying to save cookie... Top 10 most popular pages:
CPAN man page (4333 hits) (Suse Linux 10.1)
ssh man page (4186 hits) (Suse Linux 10.1)
adv_cap_autoneg man page (4166 hits) (Solaris 10 11_06)
sqlite3 man page (4089 hits) (openSUSE 10.2)
svn man page (3251 hits) (FreeBSD 6.2)
startproc man page (1908 hits) (Suse Linux 10.1)
pprosetup man page (1667 hits) (Solaris 10 11_06)
netcat man page (1614 hits) (Suse Linux 10.1)
signal man page (1595 hits) (Suse Linux 10.1)
ssh-socks5-proxy-connect man page (1562 hits) (Solaris 10 11_06)
|