Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 26
- Abstract
- This document describes how to use a Generic Security Service Application Program Interface (GSS-API) mechanism in the Simple Authentication and Security Layer (SASL) framework. This is done by defining a new SASL mechanism family, called GS2. This mechanism family offers a number of improvements over the previous "SASL/ GSSAPI" mechanism: it is more general, uses fewer messages for the authentication phase in some cases, and supports negotiable use of channel binding. Only GSS-API mechanisms that support channel binding and mutual authentication are supported. [STANDARDS-TRACK]
- Publication Date
- 2010-07-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC5801- Link
- https://doi.org/10.17487/RFC5801
- Author(s)
- Simon JosefssonNicolás Williams
Latest version of IETF RFC 5801
Document Versions — IETF RFC 5801
-
▶ IETF RFC 5801 (2010-07-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- NIST FIPS 180-1 [Withdrawn]
- IETF RFC 2119 [Active*]
- IETF RFC 2743 [Active*]
- IETF RFC 3629 [Active*]
- IETF RFC 4422 [Active*]
- IETF RFC 4648 [Active*]
- RFC5056 — 2 EXTERNAL
- IETF RFC 5234 [Active, Amended*]
- IETF RFC 5554 [Active*]
- IETF RFC 5929 [Active*]
- T-REC-X.690.2002 — 12 EXTERNAL
Bibliographic Reference(s)
- Asokan, N., Niemi, V., and K. Nyberg, "Man-in-the-Middle in Tunnelled Authentication", in 11th Security Protocols Workshop, 2002. EXTERNAL
- Melnikov, A., "The Kerberos V5 ("GSSAPI") SASL mechanism" , Work in Progress, March 2005. EXTERNAL
- IETF RFC 1034 [Active*]
- IETF RFC 1964 [Active*]
- IETF RFC 2025 [Active*]
- IETF RFC 2222 [Superseded*]
- IETF RFC 2744 [Active*]
- IETF RFC 4033 [Active*]
- IETF RFC 4121 [Active*]
- IETF RFC 4178 [Active*]
- IETF RFC 4752 [Active*]
- IETF RFC 5246 [Superseded*]
- RFC5587 — RFC5587 EXTERNAL
- IETF RFC 5802 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5801.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5801, Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family. Available at https://doi.org/10.17487/RFC5801
Snippet:
IETF RFC 5801, Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family. Available at https://doi.org/10.17487/RFC5801
HTML (ISO 690 compliant)
Preview:
IETF RFC 5801, Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family. Available at https://doi.org/10.17487/RFC5801
Snippet:
<span class="citation"><cite>IETF RFC 5801</cite>, Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family. Available at <a href="https://doi.org/10.17487/RFC5801" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5801</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5801, Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family
doi: 10.17487/RFC5801
url: https://doi.org/10.17487/RFC5801
doi: 10.17487/RFC5801
url: https://doi.org/10.17487/RFC5801
Snippet:
<li> <cite id="bib-rfc5801">IETF RFC 5801</cite>, Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family <span class="doi">10.17487/RFC5801</span> </li>
Referenced By
- IETF RFC 5802 [Active*]
- IETF RFC 5929 [Active*]
- IETF RFC 9266 [Active*]