API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 5896
[ACTIVE]

Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy

Metadata

Publisher
IETF
Doc Type
Standard
Pages
6
Abstract
Several Generic Security Service Application Program Interface (GSS-API) applications work in a multi-tiered architecture, where the server takes advantage of delegated user credentials to act on behalf of the user and contact additional servers. In effect, the server acts as an agent on behalf of the user. Examples include web applications that need to access e-mail or file servers, including CIFS (Common Internet File System) file servers. However, delegating the user credentials to a party who is not sufficiently trusted is problematic from a security standpoint. Kerberos provides a flag called OK-AS-DELEGATE that allows the administrator of a Kerberos realm to communicate that a particular service is trusted for delegation. This specification adds support for this flag and similar facilities in other authentication mechanisms to GSS-API (RFC 2743). [STANDARDS-TRACK]
Publication Date
2010-06-01
Status Note
Proposed Standard
DOI
10.17487/RFC5896
Link
https://doi.org/10.17487/RFC5896
Author(s)
Love Astrand
Sam Hartman
Latest version of IETF RFC 5896

Document Versions — IETF RFC 5896

  • ▶ IETF RFC 5896 (2010-06-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC5896.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 5896, Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy. Available at https://doi.org/10.17487/RFC5896
Snippet:
IETF RFC 5896, Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy. Available at https://doi.org/10.17487/RFC5896

HTML (ISO 690 compliant)

Preview:
IETF RFC 5896, Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy. Available at https://doi.org/10.17487/RFC5896
Snippet:
<span class="citation"><cite>IETF RFC 5896</cite>, Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy. Available at <a href="https://doi.org/10.17487/RFC5896" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5896</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 5896, Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy
doi: 10.17487/RFC5896
url: https://doi.org/10.17487/RFC5896
Snippet:
<li>
<cite id="bib-rfc5896">IETF RFC 5896</cite>, Generic Security Service Application Program Interface (GSS-API): Delegate if Approved by Policy
<span class="doi">10.17487/RFC5896</span>
</li>