Talking with Kerberized services using GSS-API

Sabu Shefeeq sst at india.hp.com
Mon Oct 21 00:25:44 EDT 2002


Hi,

Steve Langasek wrote:
> 
> On Fri, Oct 18, 2002 at 02:12:34PM -0400, Frank Balluffi wrote:
> 
> > To the best of my knowledge, SASL supports authentication, but not
> > (application-level) encryption, whereas the GSS-API supports
> > authentication and encryption (e.g., via the gss_wrap and gss_unwrap
> > functions).
> 
> SASL does support encryption.  I'm using SASL-enabled LDAP with GSSAPI
> authentication, and the data stream is automatically encrypted with
> certain LDAP clients.
That sounds interesting, could you please tell me which are the LDAP 
clients which support this? I guess they in turn use the gss_wrap/unwrap
itself.

Sabu
> 
> Steve Langasek
> postmodern programmer
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> http://mailman.mit.edu/mailman/listinfo/kerberos
-------------- next part --------------
A non-text attachment was scrubbed...
Name: sst.vcf
Type: text/x-vcard
Size: 286 bytes
Desc: Card for Sabu Shefeeq
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20021021/e1d01082/attachment.vcf


More information about the Kerberos mailing list