Subject: Postscript of Extended GSS-APIs

From: [email-masked] (Denis PINKAS)
Date: Thu, 17 Jun 93 18:30:29 EET

CIW,

As mentioned in another mail, I am providing a postscript version of the
Extended Generic Security Service API. It also provides a tutorial on the
Base GSS-API from IETF. This document is relevant to the security extensions
currently planned.

cut here =======
%!PS-Adobe-3.0
%%Creator: Windows PSCRIPT
%%Title: Microsoft Word - EGG3.DOC
%%BoundingBox: 18 9 593 784
%%DocumentNeededResources: (atend)
%%DocumentSuppliedResources: (atend)
%%Pages: (atend)
%%BeginResource: procset Win35Dict 3 1
/Win35Dict 290 dict def Win35Dict begin/bd{bind def}bind def/in{72
mul}bd/ed{exch def}bd/ld{load def}bd/tr/translate ld/gs/gsave ld/gr
/grestore ld/M/moveto ld/L/lineto ld/rmt/rmoveto ld/rlt/rlineto ld
/rct/rcurveto ld/st/stroke ld/n/newpath ld/sm/setmatrix ld/cm/currentmatrix
ld/cp/closepath ld/ARC/arcn ld/TR{65536 div}bd/lj/setlinejoin ld/lc
/setlinecap ld/ml/setmiterlimit ld/sl/setlinewidth ld/scignore false
def/sc{scignore{pop pop pop}{0 index 2 index eq 2 index 4 index eq
and{pop pop 255 div setgray}{3{255 div 3 1 roll}repeat setrgbcolor}ifelse}ifelse}bd
/FC{bR bG bB sc}bd/fC{/bB ed/bG ed/bR ed}bd/HC{hR hG hB sc}bd/hC{
/hB ed/hG ed/hR ed}bd/PC{pR pG pB sc}bd/pC{/pB ed/pG ed/pR ed}bd/sM
matrix def/PenW 1 def/iPen 5 def/mxF matrix def/mxE matrix def/mxUE
matrix def/mxUF matrix def/fBE false def/iDevRes 72 0 matrix defaultmatrix
dtransform dup mul exch dup mul add sqrt def/fPP false def/SS{fPP{
/SV save def}{gs}ifelse}bd/RS{fPP{SV restore}{gr}ifelse}bd/EJ{gsave
showpage grestore}bd/#C{userdict begin/#copies ed end}bd/FEbuf 2 string
def/FEglyph(G  )def/FE{1 exch{dup 16 FEbuf cvrs FEglyph exch 1 exch
putinterval 1 index exch FEglyph cvn put}for}bd/SM{/iRes ed/cyP ed
/cxPg ed/cyM ed/cxM ed 72 100 div dup scale dup 0 ne{90 eq{cyM exch
0 eq{cxM exch tr -90 rotate -1 1 scale}{cxM cxPg add exch tr +90 rotate}ifelse}{cyP
cyM sub exch 0 ne{cxM exch tr -90 rotate}{cxM cxPg add exch tr -90
rotate 1 -1 scale}ifelse}ifelse}{pop cyP cyM sub exch 0 ne{cxM cxPg
add exch tr 180 rotate}{cxM exch tr 1 -1 scale}ifelse}ifelse 100 iRes
div dup scale 0 0 transform .25 add round .25 sub exch .25 add round
.25 sub exch itransform translate}bd/SJ{1 index 0 eq{pop pop/fBE false
def}{1 index/Break ed div/dxBreak ed/fBE true def}ifelse}bd/ANSIVec[
16#0/grave 16#1/acute 16#2/circumflex 16#3/tilde 16#4/macron 16#5/breve
16#6/dotaccent 16#7/dieresis 16#8/ring 16#9/cedilla 16#A/hungarumlaut
16#B/ogonek 16#C/caron 16#D/dotlessi 16#27/quotesingle 16#60/grave
16#7C/bar 16#82/quotesinglbase 16#83/florin 16#84/quotedblbase 16#85
/ellipsis 16#86/dagger 16#87/daggerdbl 16#89/perthousand 16#8A/Scaron
16#8B/guilsinglleft 16#8C/OE 16#91/quoteleft 16#92/quoteright 16#93
/quotedblleft 16#94/quotedblright 16#95/bullet 16#96/endash 16#97
/emdash 16#99/trademark 16#9A/scaron 16#9B/guilsinglright 16#9C/oe
16#9F/Ydieresis 16#A0/space 16#A4/currency 16#A6/brokenbar 16#A7/section
16#A8/dieresis 16#A9/copyright 16#AA/ordfeminine 16#AB/guillemotleft
16#AC/logicalnot 16#AD/hyphen 16#AE/registered 16#AF/macron 16#B0/degree
16#B1/plusminus 16#B2/twosuperior 16#B3/threesuperior 16#B4/acute 16#B5
/mu 16#B6/paragraph 16#B7/periodcentered 16#B8/cedilla 16#B9/onesuperior
16#BA/ordmasculine 16#BB/guillemotright 16#BC/onequarter 16#BD/onehalf
16#BE/threequarters 16#BF/questiondown 16#C0/Agrave 16#C1/Aacute 16#C2
/Acircumflex 16#C3/Atilde 16#C4/Adieresis 16#C5/Aring 16#C6/AE 16#C7
/Ccedilla 16#C8/Egrave 16#C9/Eacute 16#CA/Ecircumflex 16#CB/Edieresis
16#CC/Igrave 16#CD/Iacute 16#CE/Icircumflex 16#CF/Idieresis 16#D0/Eth
16#D1/Ntilde 16#D2/Ograve 16#D3/Oacute 16#D4/Ocircumflex 16#D5/Otilde
16#D6/Odieresis 16#D7/multiply 16#D8/Oslash 16#D9/Ugrave 16#DA/Uacute
16#DB/Ucircumflex 16#DC/Udieresis 16#DD/Yacute 16#DE/Thorn 16#DF/germandbls
16#E0/agrave 16#E1/aacute 16#E2/acircumflex 16#E3/atilde 16#E4/adieresis
16#E5/aring 16#E6/ae 16#E7/ccedilla 16#E8/egrave 16#E9/eacute 16#EA
/ecircumflex 16#EB/edieresis 16#EC/igrave 16#ED/iacute 16#EE/icircumflex
16#EF/idieresis 16#F0/eth 16#F1/ntilde 16#F2/ograve 16#F3/oacute 16#F4
/ocircumflex 16#F5/otilde 16#F6/odieresis 16#F7/divide 16#F8/oslash
16#F9/ugrave 16#FA/uacute 16#FB/ucircumflex 16#FC/udieresis 16#FD/yacute
16#FE/thorn 16#FF/ydieresis ] def/reencdict 12 dict def/IsChar{basefontdict
/CharStrings get exch known}bd/MapCh{dup IsChar not{pop/bullet}if
newfont/Encoding get 3 1 roll put}bd/MapDegree{16#b0/degree IsChar{
/degree}{/ring}ifelse MapCh}bd/MapBB{16#a6/brokenbar IsChar{/brokenbar}{
/bar}ifelse MapCh}bd/ANSIFont{reencdict begin/newfontname ed/basefontname
ed FontDirectory newfontname known not{/basefontdict basefontname findfont
def/newfont basefontdict maxlength dict def basefontdict{exch dup/FID
ne{dup/Encoding eq{exch dup length array copy newfont 3 1 roll put}{exch
newfont 3 1 roll put}ifelse}{pop pop}ifelse}forall newfont/FontName
newfontname put 127 1 159{newfont/Encoding get exch/bullet put}for
ANSIVec aload pop ANSIVec length 2 idiv{MapCh}repeat MapDegree MapBB
newfontname newfont definefont pop}if newfontname end}bd/SB{FC/ULlen
ed/str ed str length fBE not{dup 1 gt{1 sub}if}if/cbStr ed/dxGdi ed
/y0 ed/x0 ed str stringwidth dup 0 ne{/y1 ed/x1 ed y1 y1 mul x1 x1
mul add sqrt dxGdi exch div 1 sub dup x1 mul cbStr div exch y1 mul
cbStr div}{exch abs neg dxGdi add cbStr div exch}ifelse/dyExtra ed
/dxExtra ed x0 y0 M fBE{dxBreak 0 BCh dxExtra dyExtra str awidthshow}{dxExtra
dyExtra str ashow}ifelse fUL{x0 y0 M dxUL dyUL rmt ULlen fBE{Break
add}if 0 mxUE transform gs rlt cyUL sl [] 0 setdash st gr}if fSO{x0
y0 M dxSO dySO rmt ULlen fBE{Break add}if 0 mxUE transform gs rlt cyUL
sl [] 0 setdash st gr}if n/fBE false def}bd/font{/name ed/Ascent ed
0 ne/fT3 ed 0 ne/fSO ed 0 ne/fUL ed/Sy ed/Sx ed 10.0 div/ori ed -10.0
div/esc ed/BCh ed name findfont/xAscent 0 def/yAscent Ascent def/ULesc
esc def ULesc mxUE rotate pop fT3{/esc 0 def xAscent yAscent mxUE transform
/yAscent ed/xAscent ed}if [Sx 0 0 Sy neg xAscent yAscent] esc mxE
rotate mxF concatmatrix makefont setfont [Sx 0 0 Sy neg 0 Ascent] mxUE
mxUF concatmatrix pop fUL{currentfont dup/FontInfo get/UnderlinePosition
known not{pop/Courier findfont}if/FontInfo get/UnderlinePosition get
1000 div 0 exch mxUF transform/dyUL ed/dxUL ed}if fSO{0 .3 mxUF transform
/dySO ed/dxSO ed}if fUL fSO or{currentfont dup/FontInfo get/UnderlineThickness
known not{pop/Courier findfont}if/FontInfo get/UnderlineThickness get
1000 div Sy mul/cyUL ed}if}bd/min{2 copy gt{exch}if pop}bd/max{2 copy
lt{exch}if pop}bd/CP{/ft ed{{ft 0 eq{clip}{eoclip}ifelse}stopped{currentflat
1 add setflat}{exit}ifelse}loop}bd/patfont 10 dict def patfont begin
/FontType 3 def/FontMatrix [1 0 0 -1 0 0] def/FontBBox [0 0 16 16]
def/Encoding StandardEncoding def/BuildChar{pop pop 16 0 0 0 16 16
setcachedevice 16 16 false [1 0 0 1 .25 .25]{pat}imagemask}bd end/p{
/pat 32 string def{}forall 0 1 7{dup 2 mul pat exch 3 index put dup
2 mul 1 add pat exch 3 index put dup 2 mul 16 add pat exch 3 index
put 2 mul 17 add pat exch 2 index put pop}for}bd/pfill{/PatFont patfont
definefont setfont/ch(AAAA)def X0 64 X1{Y1 -16 Y0{1 index exch M ch
show}for pop}for}bd/vert{X0 w X1{dup Y0 M Y1 L st}for}bd/horz{Y0 w
Y1{dup X0 exch M X1 exch L st}for}bd/fdiag{X0 w X1{Y0 M X1 X0 sub dup
rlt st}for Y0 w Y1{X0 exch M Y1 Y0 sub dup rlt st}for}bd/bdiag{X0 w
X1{Y1 M X1 X0 sub dup neg rlt st}for Y0 w Y1{X0 exch M Y1 Y0 sub dup
neg rlt st}for}bd/AU{1 add cvi 15 or}bd/AD{1 sub cvi -16 and}bd/SHR{pathbbox
AU/Y1 ed AU/X1 ed AD/Y0 ed AD/X0 ed}bd/hfill{/w iRes 37.5 div round
def 0.1 sl [] 0 setdash n dup 0 eq{horz}if dup 1 eq{vert}if dup 2 eq{fdiag}if
dup 3 eq{bdiag}if dup 4 eq{horz vert}if 5 eq{fdiag bdiag}if}bd/F{/ft
ed fm 256 and 0 ne{gs FC ft 0 eq{fill}{eofill}ifelse gr}if fm 1536
and 0 ne{SHR gs HC ft CP fm 1024 and 0 ne{/Tmp save def pfill Tmp restore}{fm
15 and hfill}ifelse gr}if}bd/S{PenW sl PC st}bd/m matrix def/GW{iRes
12 div PenW add cvi}bd/DoW{iRes 50 div PenW add cvi}bd/DW{iRes 8 div
PenW add cvi}bd/SP{/PenW ed/iPen ed iPen 0 eq iPen 6 eq or{[] 0 setdash}if
iPen 1 eq{[DW GW] 0 setdash}if iPen 2 eq{[DoW GW] 0 setdash}if iPen
3 eq{[DW GW DoW GW] 0 setdash}if iPen 4 eq{[DW GW DoW GW DoW GW] 0
setdash}if}bd/E{m cm pop tr scale 1 0 moveto 0 0 1 0 360 arc cp m sm}bd
/AG{/sy ed/sx ed sx div 4 1 roll sy div 4 1 roll sx div 4 1 roll sy
div 4 1 roll atan/a2 ed atan/a1 ed sx sy scale a1 a2 ARC}def/A{m cm
pop tr AG m sm}def/P{m cm pop tr 0 0 M AG cp m sm}def/RRect{n 4 copy
M 3 1 roll exch L 4 2 roll L L cp}bd/RRCC{/r ed/y1 ed/x1 ed/y0 ed/x0
ed x0 x1 add 2 div y0 M x1 y0 x1 y1 r arcto 4{pop}repeat x1 y1 x0 y1
r arcto 4{pop}repeat x0 y1 x0 y0 r arcto 4{pop}repeat x0 y0 x1 y0 r
arcto 4{pop}repeat cp}bd/RR{2 copy 0 eq exch 0 eq or{pop pop RRect}{2
copy eq{pop RRCC}{m cm pop/y2 ed/x2 ed/ys y2 x2 div 1 max def/xs x2
y2 div 1 max def/y1 exch ys div def/x1 exch xs div def/y0 exch ys div
def/x0 exch xs div def/r2 x2 y2 min def xs ys scale x0 x1 add 2 div
y0 M x1 y0 x1 y1 r2 arcto 4{pop}repeat x1 y1 x0 y1 r2 arcto 4{pop}repeat
x0 y1 x0 y0 r2 arcto 4{pop}repeat x0 y0 x1 y0 r2 arcto 4{pop}repeat
m sm cp}ifelse}ifelse}bd/PP{{rlt}repeat}bd/OB{gs 0 ne{7 3 roll/y ed
/x ed x y translate ULesc rotate x neg y neg translate x y 7 -3 roll}if
sc B fill gr}bd/B{M/dy ed/dx ed dx 0 rlt 0 dy rlt dx neg 0 rlt cp}bd
/CB{B clip n}bd/ErrHandler{errordict dup maxlength exch length gt
dup{errordict begin}if/errhelpdict 12 dict def errhelpdict begin/stackunderflow(operand stack underflow)def
/undefined(this name is not defined in a dictionary)def/VMerror(you have used up all the printer's memory)def
/typecheck(operator was expecting a different type of operand)def
/ioerror(input/output error occured)def end{end}if errordict begin
/handleerror{$error begin newerror{/newerror false def showpage 72
72 scale/x .25 def/y 9.6 def/Helvetica findfont .2 scalefont setfont
x y moveto(Offending Command = )show/command load{dup type/stringtype
ne{(max err string)cvs}if show}exec/y y .2 sub def x y moveto(Error = )show
errorname{dup type dup( max err string )cvs show( : )show/stringtype
ne{( max err string )cvs}if show}exec errordict begin errhelpdict errorname
known{x 1 add y .2 sub moveto errhelpdict errorname get show}if end
/y y .4 sub def x y moveto(Stack =)show ostack{/y y .2 sub def x 1
add y moveto dup type/stringtype ne{( max err string )cvs}if show}forall
showpage}if end}def end}bd end
%%EndResource
/SVDoc save def
%%EndProlog
%%BeginSetup
Win35Dict begin
ErrHandler
statusdict begin 0 setjobtimeout end
statusdict begin statusdict /jobname (Microsoft Word - EGG3.DOC) put end
/oldDictCnt countdictstack def {}stopped 
{ countdictstack oldDictCnt lt { Win35Dict begin } 
{1 1 countdictstack oldDictCnt sub {pop end } for } ifelse } if 
/oldDictCnt countdictstack def {letter
}stopped 
{ countdictstack oldDictCnt lt { Win35Dict begin } 
{1 1 countdictstack oldDictCnt sub {pop end } for } ifelse } if 
[
{mark 1.0 1.0 .98 .9 .82 .68 .56 .48 .28 .1 .06 .0 counttomark dup 3 add -1 roll exch 2 sub mul dup floor cvi dup 3 1 roll sub exch dup  3 add index exch 2 add index dup 4 1 roll sub mul add counttomark 1 add 1 roll  cleartomark } bind
/exec load currenttransfer /exec load] cvx settransfer
/setresolution where { pop 300 300 setresolution } if
%%EndSetup
%%Page: 1 1
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
668 269 1064 (An Extended Generic Security Service API) 1064 SB
32 0 0 33 33 0 0 0 29 /Times-Roman /font32 ANSIFont font
1136 387 128 (SESAME) 128 SB
1096 425 207 (Bull - ICL -SNI) 207 SB
1057 513 286 (Piers McMahon - ICL) 286 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 652 185 (Abstract) 185 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 761 1367 (With the growing awareness of network security threats, providers of distributed ) 1368 SB
1668 761 191 (computing ) 192 SB
1860 761 240 (infrastructure,) 240 SB
300 811 215 (applications ) 216 SB
516 811 73 (and ) 75 SB
591 811 165 (protocols ) 167 SB
758 811 63 (are ) 65 SB
823 811 217 (increasingly ) 219 SB
1042 811 104 (being ) 106 SB
1148 811 152 (required ) 154 SB
1302 811 43 (to ) 45 SB
1347 811 160 (integrate ) 162 SB
1509 811 142 (security ) 144 SB
1653 811 144 (services ) 146 SB
1799 811 77 (into ) 79 SB
1878 811 90 (their ) 92 SB
1970 811 130 (systems) 130 SB
300 861 43 (to ) 52 SB
352 861 127 (protect ) 136 SB
488 861 132 (against ) 141 SB
629 861 230 (unauthorised ) 239 SB
868 861 125 (system ) 134 SB
1002 861 127 (access, ) 136 SB
1138 861 73 (and ) 82 SB
1220 861 128 (attacks ) 137 SB
1357 861 132 (against ) 141 SB
1498 861 81 (user ) 90 SB
1588 861 73 (and ) 83 SB
1671 861 125 (system ) 135 SB
1806 861 93 (data. ) 103 SB
1909 861 87 (This ) 97 SB
2006 861 94 (paper) 94 SB
300 911 165 (describes ) 168 SB
468 911 82 (how ) 85 SB
553 911 97 (these ) 100 SB
653 911 243 (requirements, ) 246 SB
899 911 149 (together ) 152 SB
1051 911 86 (with ) 89 SB
1140 911 115 (trends ) 118 SB
1258 911 97 (away ) 100 SB
1358 911 92 (from ) 96 SB
1454 911 145 (bespoke ) 149 SB
1603 911 162 (solutions ) 166 SB
1769 911 73 (and ) 77 SB
1846 911 143 (towards ) 147 SB
1993 911 107 (COTS) 107 SB
300 961 458 (\(commercial-off-the-shelf\) ) 470 SB
770 961 153 (software ) 165 SB
935 961 224 (components, ) 236 SB
1171 961 63 (are ) 75 SB
1246 961 183 (provoking ) 195 SB
1441 961 201 (widespread ) 214 SB
1655 961 136 (interest ) 149 SB
1804 961 45 (in ) 58 SB
1862 961 142 (security ) 155 SB
2017 961 83 (APIs) 83 SB
300 1011 114 (which ) 122 SB
422 1011 70 (can ) 78 SB
500 1011 120 (enable ) 128 SB
628 1011 215 (applications ) 223 SB
851 1011 43 (to ) 51 SB
902 1011 127 (exploit ) 135 SB
1037 1011 191 (distributed ) 199 SB
1236 1011 263 (authentication, ) 271 SB
1507 1011 244 (authorisation, ) 252 SB
1759 1011 73 (and ) 81 SB
1840 1011 82 (data ) 90 SB
1930 1011 170 (protection) 170 SB
300 1061 144 (services ) 145 SB
445 1061 64 (but ) 65 SB
510 1061 139 (without ) 140 SB
650 1061 137 (locking ) 138 SB
788 1061 96 (them ) 97 SB
885 1061 77 (into ) 78 SB
963 1061 30 (a ) 31 SB
994 1061 139 (specific ) 141 SB
1135 1061 225 (environment ) 227 SB
1362 1061 46 (or ) 48 SB
1410 1061 142 (security ) 144 SB
1554 1061 215 (mechanism. ) 217 SB
1771 1061 87 (This ) 89 SB
1860 1061 105 (paper ) 107 SB
1967 1061 133 (outlines) 133 SB
300 1111 992 (the status of GSS-API, and shows how GSS-API can meet ) 993 SB
1293 1111 104 (many ) 105 SB
1398 1111 44 (of ) 45 SB
1443 1111 63 (the ) 64 SB
1507 1111 232 (requirements ) 233 SB
1740 1111 59 (for ) 60 SB
1800 1111 199 (application ) 200 SB
2000 1111 66 (use ) 67 SB
2067 1111 33 (of) 33 SB
300 1161 191 (distributed ) 199 SB
499 1161 142 (security ) 150 SB
649 1161 155 (services. ) 163 SB
812 1161 37 (It ) 45 SB
857 1161 78 (also ) 86 SB
943 1161 114 (shows ) 123 SB
1066 1161 63 (the ) 72 SB
1138 1161 232 (requirements ) 241 SB
1379 1161 114 (which ) 123 SB
1502 1161 168 (GSS-API ) 177 SB
1679 1161 90 (can't ) 99 SB
1778 1161 92 (meet ) 101 SB
1879 1161 60 (\(as ) 69 SB
1948 1161 152 (currently) 152 SB
300 1211 258 (specified\), and ) 259 SB
559 1211 165 (describes ) 166 SB
725 1211 188 (extensions ) 189 SB
914 1211 114 (which ) 115 SB
1029 1211 52 (do ) 53 SB
1082 1211 92 (meet ) 93 SB
1175 1211 97 (these ) 98 SB
1273 1211 243 (requirements. ) 244 SB
1517 1211 87 (This ) 88 SB
1605 1211 105 (paper ) 106 SB
1711 1211 108 (walks ) 109 SB
1820 1211 144 (through ) 145 SB
1965 1211 82 (how ) 83 SB
2048 1211 52 (the) 52 SB
300 1261 1301 (extended GSS-API can be used, and includes consideration of how it may be ) 1302 SB
1602 1261 87 (used ) 88 SB
1690 1261 43 (to ) 44 SB
1734 1261 137 (support ) 138 SB
1872 1261 228 (environment-) 228 SB
300 1311 1303 (specific security interfaces such as those which are being developed for DCE.) 1303 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 1461 1007 (1. Motivation for Security API Standardisation) 1007 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 1570 77 (The ) 79 SB
379 1570 137 (priority ) 139 SB
518 1570 104 (being ) 106 SB
624 1570 104 (given ) 106 SB
730 1570 43 (to ) 45 SB
775 1570 142 (security ) 145 SB
920 1570 44 (of ) 47 SB
967 1570 169 (computer ) 172 SB
1139 1570 141 (systems ) 144 SB
1283 1570 73 (and ) 76 SB
1359 1570 164 (networks ) 167 SB
1526 1570 39 (is ) 42 SB
1568 1570 162 (growing. ) 165 SB
1733 1570 87 (This ) 90 SB
1823 1570 39 (is ) 42 SB
1865 1570 45 (in ) 48 SB
1913 1570 78 (part ) 81 SB
1994 1570 71 (due ) 74 SB
2068 1570 32 (to) 32 SB
300 1620 803 (well-publicised exploits of hackers, and threats ) 804 SB
1104 1620 43 (to ) 44 SB
1148 1620 141 (systems ) 142 SB
1290 1620 71 (due ) 72 SB
1362 1620 43 (to ) 44 SB
1406 1620 140 (viruses, ) 141 SB
1547 1620 64 (but ) 65 SB
1612 1620 35 (it ) 36 SB
1648 1620 78 (also ) 79 SB
1727 1620 133 (reflects ) 134 SB
1861 1620 63 (the ) 64 SB
1925 1620 175 (increasing) 175 SB
300 1670 99 (trend ) 114 SB
414 1670 143 (towards ) 159 SB
573 1670 221 (client-server ) 237 SB
810 1670 191 (distributed ) 207 SB
1017 1670 152 (systems. ) 168 SB
1185 1670 77 (The ) 93 SB
1278 1670 185 (previously ) 201 SB
1479 1670 194 (centralised ) 210 SB
1689 1670 166 (approach ) 182 SB
1871 1670 44 (of ) 60 SB
1931 1670 169 (managing) 169 SB
300 1720 169 (corporate ) 171 SB
471 1720 82 (data ) 84 SB
555 1720 53 (on ) 55 SB
610 1720 30 (a ) 32 SB
642 1720 112 (single ) 114 SB
756 1720 117 (secure ) 119 SB
875 1720 195 (mainframe ) 197 SB
1072 1720 39 (is ) 41 SB
1113 1720 168 (changing ) 170 SB
1283 1720 43 (to ) 45 SB
1328 1720 137 (support ) 139 SB
1467 1720 161 (devolved ) 163 SB
1630 1720 190 (processing ) 192 SB
1822 1720 53 (on ) 56 SB
1878 1720 222 (departmental) 222 SB
300 1770 1655 (servers or PCs. Consequently, the amount of sensitive data crossing insecure networks is growing.) 1655 SB
300 1870 176 (Therefore ) 179 SB
479 1870 96 (there ) 99 SB
578 1870 39 (is ) 42 SB
620 1870 85 (both ) 88 SB
708 1870 30 (a ) 33 SB
741 1870 172 (perceived ) 175 SB
916 1870 73 (and ) 76 SB
992 1870 112 (actual ) 115 SB
1107 1870 211 (aggravation ) 214 SB
1321 1870 44 (of ) 47 SB
1368 1870 63 (the ) 66 SB
1434 1870 125 (threats ) 128 SB
1562 1870 43 (to ) 47 SB
1609 1870 63 (the ) 67 SB
1676 1870 266 (confidentiality, ) 270 SB
1946 1870 154 (integrity,) 154 SB
300 1920 73 (and ) 80 SB
380 1920 199 (availability ) 206 SB
586 1920 44 (of ) 51 SB
637 1920 105 (users' ) 112 SB
749 1920 215 (applications ) 222 SB
971 1920 73 (and ) 80 SB
1051 1920 93 (data. ) 100 SB
1151 1920 87 (This ) 94 SB
1245 1920 68 (has ) 75 SB
1320 1920 115 (meant ) 122 SB
1442 1920 76 (that ) 83 SB
1525 1920 142 (security ) 150 SB
1675 1920 39 (is ) 47 SB
1722 1920 164 (featuring ) 172 SB
1894 1920 206 (increasingly) 206 SB
300 1970 1221 (strongly in commercial and \(non-military\) government IT requirements.) 1221 SB
300 2070 222 (Athough the ) 223 SB
523 2070 107 (levels ) 108 SB
631 2070 44 (of ) 45 SB
676 2070 153 (software ) 154 SB
830 2070 186 (assurance, ) 187 SB
1017 2070 73 (and ) 74 SB
1091 2070 78 (also ) 79 SB
1170 2070 63 (the ) 64 SB
1234 2070 142 (security ) 143 SB
1377 2070 140 (policies ) 141 SB
1518 2070 114 (which ) 115 SB
1633 2070 90 (need ) 91 SB
1724 2070 43 (to ) 44 SB
1768 2070 49 (be ) 50 SB
1818 2070 156 (enforced ) 157 SB
1975 2070 50 (by ) 51 SB
2026 2070 74 (civil) 74 SB
300 2120 1693 (systems will differ from those in military systems, common security services such as authentication, ) 1694 SB
1994 2120 106 (secure) 106 SB
300 2170 215 (peer-to-peer ) 227 SB
527 2170 300 (communications, ) 312 SB
839 2170 116 (access ) 128 SB
967 2170 141 (control, ) 153 SB
1120 2170 107 (audit, ) 119 SB
1239 2170 73 (and ) 85 SB
1324 2170 186 (delegation ) 199 SB
1523 2170 76 (will ) 89 SB
1612 2170 123 (almost ) 136 SB
1748 2170 125 (always ) 138 SB
1886 2170 49 (be ) 62 SB
1948 2170 152 (required.) 152 SB
300 2220 950 (Developers of systems meeting these requirements need ) 951 SB
1251 2220 43 (to ) 44 SB
1295 2220 81 (take ) 82 SB
1377 2220 141 (account ) 142 SB
1519 2220 44 (of ) 45 SB
1564 2220 63 (the ) 64 SB
1628 2220 104 (many ) 105 SB
1733 2220 155 (different ) 156 SB
1889 2220 211 (technologies) 211 SB
300 2270 114 (which ) 122 SB
422 2270 63 (are ) 71 SB
493 2270 104 (being ) 112 SB
605 2270 166 (produced ) 174 SB
779 2270 43 (to ) 51 SB
830 2270 137 (support ) 145 SB
975 2270 191 (distributed ) 199 SB
1174 2270 153 (security, ) 161 SB
1335 2270 149 (together ) 157 SB
1492 2270 86 (with ) 94 SB
1586 2270 63 (the ) 72 SB
1658 2270 183 (legislative ) 192 SB
1850 2270 199 (restrictions ) 208 SB
2058 2270 42 (on) 42 SB
300 2320 861 (cryptography which differ from country to country.) 861 SB
300 2420 248 (Consideration ) 249 SB
549 2420 44 (of ) 45 SB
594 2420 97 (these ) 98 SB
692 2420 121 (issues, ) 122 SB
814 2420 149 (together ) 150 SB
964 2420 86 (with ) 87 SB
1051 2420 63 (the ) 64 SB
1115 2420 136 (general ) 137 SB
1252 2420 102 (move ) 103 SB
1355 2420 143 (towards ) 144 SB
1499 2420 92 (open ) 93 SB
1592 2420 152 (systems, ) 153 SB
1745 2420 68 (has ) 70 SB
1815 2420 124 (caused ) 126 SB
1941 2420 159 (increased) 159 SB
300 2470 183 (awareness ) 188 SB
488 2470 44 (of ) 49 SB
537 2470 63 (the ) 68 SB
605 2470 90 (need ) 95 SB
700 2470 43 (to ) 48 SB
748 2470 120 (isolate ) 125 SB
873 2470 199 (application ) 204 SB
1077 2470 94 (logic ) 99 SB
1176 2470 92 (from ) 97 SB
1273 2470 63 (the ) 68 SB
1341 2470 121 (details ) 126 SB
1467 2470 44 (of ) 49 SB
1516 2470 139 (specific ) 145 SB
1661 2470 142 (security ) 148 SB
1809 2470 231 (mechanisms. ) 237 SB
2046 2470 54 (Ihe) 54 SB
300 2520 421 (motivation to agree on a ) 422 SB
722 2520 156 (standard ) 157 SB
879 2520 78 (API ) 79 SB
958 2520 43 (to ) 44 SB
1002 2520 137 (support ) 138 SB
1140 2520 191 (distributed ) 192 SB
1332 2520 142 (security ) 143 SB
1475 2520 144 (services ) 145 SB
1620 2520 106 (stems ) 107 SB
1727 2520 92 (from ) 93 SB
1820 2520 63 (the ) 64 SB
1884 2520 75 (real ) 76 SB
1960 2520 106 (needs ) 107 SB
2067 2520 33 (of) 33 SB
300 2570 801 (current commercial and military developments.) 801 SB
300 2670 81 (One ) 88 SB
388 2670 44 (of ) 51 SB
439 2670 63 (the ) 70 SB
509 2670 92 (most ) 99 SB
608 2670 169 (advanced ) 176 SB
784 2670 118 (efforts ) 125 SB
909 2670 45 (in ) 52 SB
961 2670 73 (this ) 80 SB
1041 2670 87 (field ) 94 SB
1135 2670 92 (from ) 99 SB
1234 2670 63 (the ) 70 SB
1304 2670 200 (perspective ) 208 SB
1512 2670 44 (of ) 52 SB
1564 2670 81 (user ) 89 SB
1653 2670 142 (security ) 150 SB
1803 2670 232 (requirements ) 240 SB
2043 2670 57 (has) 57 SB
300 2720 162 (stemmed ) 167 SB
467 2720 92 (from ) 97 SB
564 2720 63 (the ) 68 SB
632 2720 70 (UK ) 75 SB
707 2720 156 (Ministry ) 161 SB
868 2720 44 (of ) 50 SB
918 2720 148 (Defence ) 154 SB
1072 2720 149 (Security ) 155 SB
1227 2720 209 (Technology ) 215 SB
1442 2720 243 (Demonstrator ) 249 SB
1691 2720 219 (Programme. ) 225 SB
1916 2720 77 (The ) 83 SB
1999 2720 101 (initial) 101 SB
300 2770 196 (deliverable ) 209 SB
509 2770 44 (of ) 57 SB
566 2770 73 (this ) 87 SB
653 2770 206 (programme ) 220 SB
873 2770 238 ([TDP-GASP] ) 252 SB
1125 2770 149 (presents ) 163 SB
1288 2770 30 (a ) 44 SB
1332 2770 135 (generic ) 149 SB
1481 2770 211 (architecture ) 225 SB
1706 2770 59 (for ) 73 SB
1779 2770 117 (secure ) 131 SB
1910 2770 190 (processing,) 190 SB
300 2820 167 (identifies ) 176 SB
476 2820 63 (the ) 72 SB
548 2820 94 (APIs ) 103 SB
651 2820 163 (required, ) 172 SB
823 2820 73 (and ) 82 SB
905 2820 136 (surveys ) 145 SB
1050 2820 145 (existing ) 154 SB
1204 2820 149 (industry ) 158 SB
1362 2820 144 (practice ) 154 SB
1516 2820 186 (\(including ) 196 SB
1712 2820 63 (the ) 73 SB
1785 2820 162 (extended ) 172 SB
1957 2820 143 (GSSAPI) 143 SB
300 2870 1021 (presented here\) to indicate where user requirements are met.) 1021 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (1) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Times-Bold
%%+ font Times-Roman
%%Page: 2 2
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
300 269 173 (Activities ) 174 SB
474 269 63 (are ) 64 SB
538 269 78 (also ) 79 SB
617 269 175 (underway ) 176 SB
793 269 45 (in ) 46 SB
839 269 30 (a ) 31 SB
870 269 140 (number ) 141 SB
1011 269 44 (of ) 45 SB
1056 269 235 (predominatly ) 236 SB
1292 269 171 (US-based ) 173 SB
1465 269 149 (industry ) 151 SB
1616 269 84 (and, ) 86 SB
1702 269 92 (open ) 94 SB
1796 269 141 (systems ) 143 SB
1939 269 161 (standards) 161 SB
300 319 118 (bodies ) 121 SB
421 319 43 (to ) 46 SB
467 319 104 (scope ) 107 SB
574 319 63 (the ) 66 SB
640 319 127 (subject ) 130 SB
770 319 44 (of ) 47 SB
817 319 142 (security ) 145 SB
962 319 105 (APIs, ) 108 SB
1070 319 73 (and ) 76 SB
1146 319 115 (define ) 118 SB
1264 319 183 (standards. ) 186 SB
1450 319 77 (The ) 80 SB
1530 319 96 (work ) 99 SB
1629 319 45 (in ) 48 SB
1677 319 63 (the ) 66 SB
1743 319 144 (Internet ) 148 SB
1891 319 209 (Engineering) 209 SB
300 369 1339 (Task Force \(IETF\) has been highly influential in defining the base [GSS-API], ) 1340 SB
1640 369 73 (and ) 74 SB
1714 369 127 (further ) 128 SB
1842 369 96 (work ) 97 SB
1939 369 161 (continues) 161 SB
300 419 1599 (in the IETF in 1993 both on exploiting the GSS-API, and consideration of possible extensions ) 1600 SB
1900 419 166 (suportive ) 167 SB
2067 419 33 (of) 33 SB
300 469 568 (distributed authorisation services.) 568 SB
300 569 100 (Also, ) 105 SB
405 569 45 (in ) 50 SB
455 569 30 (a ) 35 SB
490 569 173 (European ) 178 SB
668 569 172 (standards ) 177 SB
845 569 145 (context, ) 150 SB
995 569 172 (following ) 177 SB
1172 569 30 (a ) 35 SB
1207 569 239 (well-attended ) 244 SB
1451 569 175 (workshop ) 180 SB
1631 569 170 (convened ) 176 SB
1807 569 45 (in ) 51 SB
1858 569 72 (late ) 78 SB
1936 569 106 (1992, ) 112 SB
2048 569 52 (the) 52 SB
300 619 733 (CEN/CENELEC ITAEGV has recently set ) 734 SB
1034 619 53 (up ) 54 SB
1088 619 52 (an ) 53 SB
1141 619 51 (ad ) 52 SB
1193 619 71 (hoc ) 72 SB
1265 619 109 (group ) 110 SB
1375 619 43 (to ) 44 SB
1419 619 153 (consider ) 154 SB
1573 619 63 (the ) 64 SB
1637 619 204 (appropriate ) 205 SB
1842 619 258 (standardisation) 258 SB
300 669 431 (needed for Security APIs.) 431 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 819 1082 (2. GSS-API and Current Standardisation Activites) 1082 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 928 1444 (It looks certain that the Generic Security Service Application Programming interface ) 1445 SB
1745 928 196 (\(GSS-API\) ) 197 SB
1942 928 76 (will ) 77 SB
2019 928 81 (form) 81 SB
300 978 845 (the basis of standards in distributed security APIs.) 845 SB
300 1078 654 (Current activities in this area include:-) 654 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1174 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1178 244 (Advancement ) 248 SB
623 1178 44 (of ) 48 SB
671 1178 251 (specifications, ) 255 SB
926 1178 46 (as ) 51 SB
977 1178 176 (submitted ) 181 SB
1158 1178 46 (as ) 51 SB
1209 1178 100 (IETF ) 105 SB
1314 1178 263 (Internet-Drafts ) 268 SB
1582 1178 45 (in ) 50 SB
1632 1178 94 (early ) 99 SB
1731 1178 95 (1993 ) 100 SB
1831 1178 108 (under ) 113 SB
1944 1178 156 (Common) 156 SB
375 1228 263 (Authentication ) 266 SB
641 1228 209 (Technology ) 212 SB
853 1228 123 (\(CAT\) ) 126 SB
979 1228 151 (working ) 155 SB
1134 1228 109 (group ) 113 SB
1247 1228 214 (jurisdiction, ) 218 SB
1465 1228 43 (to ) 47 SB
1512 1228 165 (Proposed ) 169 SB
1681 1228 163 (Standard ) 167 SB
1848 1228 100 (RFC. ) 104 SB
1952 1228 87 (This ) 91 SB
2043 1228 57 (has) 57 SB
375 1278 1058 (been based on trial implementations over Kerberos and DASS.) 1058 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1374 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1378 136 (Several ) 140 SB
515 1378 78 (API ) 82 SB
597 1378 269 (standardisation ) 273 SB
870 1378 125 (groups ) 129 SB
999 1378 169 (\(X/Open, ) 173 SB
1172 1378 145 (POSIX\) ) 150 SB
1322 1378 90 (have ) 95 SB
1417 1378 205 (approached ) 210 SB
1627 1378 100 (IETF ) 105 SB
1732 1378 95 (CAT ) 100 SB
1832 1378 43 (to ) 48 SB
1880 1378 136 (express ) 141 SB
2021 1378 79 (their) 79 SB
375 1428 508 (interest in adopting GSS-API.) 508 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1524 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1528 87 (OSF ) 92 SB
467 1528 148 (DCE1.1 ) 153 SB
620 1528 39 (is ) 44 SB
664 1528 146 (planned ) 151 SB
815 1528 43 (to ) 48 SB
863 1528 135 (include ) 140 SB
1003 1528 52 (an ) 57 SB
1060 1528 277 (implementation ) 282 SB
1342 1528 44 (of ) 49 SB
1391 1528 168 (GSS-API ) 174 SB
1565 1528 43 (to ) 49 SB
1614 1528 103 (allow ) 109 SB
1723 1528 167 (non-RPC ) 173 SB
1896 1528 204 (applications) 204 SB
375 1578 603 (access to the DCE security services.) 603 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1674 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1678 77 (The ) 82 SB
457 1678 150 (MAY92 ) 155 SB
612 1678 147 (meeting ) 152 SB
764 1678 44 (of ) 49 SB
813 1678 63 (the ) 68 SB
881 1678 78 (ISO ) 83 SB
964 1678 104 (SC21 ) 109 SB
1073 1678 101 (WG6 ) 106 SB
1179 1678 115 (Upper ) 120 SB
1299 1678 107 (Layer ) 112 SB
1411 1678 149 (Security ) 154 SB
1565 1678 224 (Rapporteur's ) 229 SB
1794 1678 109 (group ) 115 SB
1909 1678 166 (produced ) 172 SB
2081 1678 19 (a) 19 SB
375 1728 80 (new ) 92 SB
467 1728 96 (work ) 108 SB
575 1728 86 (item ) 98 SB
673 1728 155 (proposal ) 168 SB
841 1728 118 (\(SC21 ) 131 SB
972 1728 139 (N6998\) ) 152 SB
1124 1728 59 (for ) 72 SB
1196 1728 280 ("Authentication ) 293 SB
1489 1728 73 (and ) 86 SB
1575 1728 138 (Related ) 151 SB
1726 1728 149 (Security ) 162 SB
1888 1728 151 (Services ) 164 SB
2052 1728 48 (for) 48 SB
375 1778 200 (Distributed ) 204 SB
579 1778 243 (Applications" ) 247 SB
826 1778 114 (which ) 118 SB
944 1778 114 (would ) 118 SB
1062 1778 135 (include ) 139 SB
1201 1778 30 (a ) 34 SB
1235 1778 425 (mechanism-independent ) 429 SB
1664 1778 142 (abstract ) 146 SB
1810 1778 128 (service ) 132 SB
1942 1778 158 (interface.) 158 SB
375 1828 1423 (This was based on input from the UK representative [GSAI] derived from GSS-API.) 1423 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1924 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1928 77 (The ) 89 SB
464 1928 132 (ECMA ) 144 SB
608 1928 196 (TC36/TG9 ) 208 SB
816 1928 166 ("Security ) 178 SB
994 1928 45 (in ) 57 SB
1051 1928 102 (Open ) 114 SB
1165 1928 165 (Systems" ) 177 SB
1342 1928 109 (group ) 121 SB
1463 1928 196 (developing ) 208 SB
1671 1928 63 (the ) 75 SB
1746 1928 208 (Association ) 221 SB
1967 1928 133 (Context) 133 SB
375 1978 1669 (Management standard is defining this standard [ACM] in such a way that it can support GSS-API.) 1669 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 2074 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 2078 77 (The ) 79 SB
454 2078 176 (SESAME ) 179 SB
633 2078 126 (project ) 129 SB
762 2078 119 (\(based ) 122 SB
884 2078 53 (on ) 56 SB
940 2078 132 (ECMA ) 135 SB
1075 2078 196 (TC36/TG9 ) 199 SB
1274 2078 166 ("Security ) 169 SB
1443 2078 45 (in ) 48 SB
1491 2078 102 (Open ) 105 SB
1596 2078 165 (Systems" ) 168 SB
1764 2078 110 (work\) ) 113 SB
1877 2078 39 (is ) 42 SB
1919 2078 181 (supporting) 181 SB
375 2128 734 (and originating extensions to the GSS-API.) 734 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 2278 539 (3. GSS-API Design Goals) 539 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 2387 810 ([GSS_API] defines four basic goals for the API:) 810 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 2484 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 2487 617 (Security mechanism independence) 617 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2587 77 (The ) 83 SB
457 2587 78 (API ) 84 SB
541 2587 81 (user ) 87 SB
628 2587 88 (calls ) 94 SB
722 2587 53 (on ) 59 SB
781 2587 63 (the ) 69 SB
850 2587 144 (services ) 150 SB
1000 2587 44 (of ) 50 SB
1050 2587 30 (a ) 36 SB
1086 2587 192 (supporting ) 199 SB
1285 2587 142 (security ) 149 SB
1434 2587 204 (mechanism ) 211 SB
1645 2587 45 (in ) 52 SB
1697 2587 30 (a ) 37 SB
1734 2587 135 (generic ) 142 SB
1876 2587 151 (manner. ) 158 SB
2034 2587 66 (The) 66 SB
374 2637 675 (calling application is therefore portable ) 676 SB
1050 2637 73 (and ) 74 SB
1124 2637 82 (may ) 83 SB
1207 2637 49 (be ) 50 SB
1257 2637 87 (used ) 88 SB
1345 2637 86 (with ) 87 SB
1432 2637 71 (any ) 72 SB
1504 2637 142 (security ) 143 SB
1647 2637 204 (mechanism ) 205 SB
1852 2637 144 (selected ) 145 SB
1997 2637 50 (by ) 51 SB
2048 2637 52 (the) 52 SB
374 2687 1479 (security policy \(provided of course that there is an API implementation available for it\).) 1479 SB
374 2787 187 (Portability ) 188 SB
562 2787 147 (requires ) 148 SB
710 2787 76 (that ) 77 SB
787 2787 63 (the ) 64 SB
851 2787 78 (API ) 79 SB
930 2787 154 (becomes ) 155 SB
1085 2787 30 (a ) 31 SB
1116 2787 122 (widely ) 123 SB
1239 2787 143 (adopted ) 144 SB
1383 2787 92 (open ) 94 SB
1477 2787 167 (standard, ) 169 SB
1646 2787 73 (and ) 75 SB
1721 2787 109 (hence ) 111 SB
1832 2787 93 (must ) 95 SB
1927 2787 48 (fit ) 50 SB
1977 2787 86 (with ) 88 SB
2065 2787 35 (or) 35 SB
374 2837 1253 (be included within standards such as promulgated by X/Open and POSIX.) 1253 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (2) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 3 3
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
374 269 208 (Mechanism ) 219 SB
593 269 242 (independence ) 253 SB
846 269 98 (gives ) 109 SB
955 269 254 (administrative ) 265 SB
1220 269 185 (flexibility. ) 197 SB
1417 269 41 (A ) 53 SB
1470 269 131 (change ) 143 SB
1613 269 44 (of ) 56 SB
1669 269 142 (security ) 154 SB
1823 269 113 (policy ) 125 SB
1948 269 43 (to ) 55 SB
2003 269 66 (use ) 78 SB
2081 269 19 (a) 19 SB
374 319 1585 (different security mechanism could be undertaken without the need for an application rewrite.) 1585 SB
374 419 77 (The ) 89 SB
463 419 78 (API ) 90 SB
553 419 119 (allows ) 132 SB
685 419 59 (for ) 72 SB
757 419 199 (application ) 212 SB
969 419 159 (selection ) 172 SB
1141 419 44 (of ) 57 SB
1198 419 142 (security ) 155 SB
1353 419 215 (mechanism. ) 228 SB
1581 419 87 (This ) 100 SB
1681 419 119 (allows ) 132 SB
1813 419 30 (a ) 43 SB
1856 419 199 (application ) 212 SB
2068 419 32 (to) 32 SB
374 469 1601 (participate in a variety of security contexts, using the security mechanism appropriate for each.) 1601 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 616 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 619 642 (Protocol environment independence) 642 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 719 1404 (The API is independent of the communications protocol with which it is employed.) 1404 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 866 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 869 610 (Protocol association independence) 610 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 969 77 (The ) 82 SB
456 969 78 (API ) 83 SB
539 969 39 (is ) 44 SB
583 969 231 (implemented ) 236 SB
819 969 47 (so ) 52 SB
871 969 76 (that ) 81 SB
952 969 35 (it ) 40 SB
992 969 39 (is ) 44 SB
1036 969 133 (equally ) 138 SB
1174 969 183 (applicable ) 188 SB
1362 969 43 (to ) 48 SB
1410 969 199 (application ) 205 SB
1615 969 169 (processes ) 175 SB
1790 969 76 (that ) 82 SB
1872 969 143 (manage ) 149 SB
2021 969 79 (their) 79 SB
374 1019 82 (own ) 87 SB
461 1019 142 (security ) 148 SB
609 1019 150 (contexts ) 156 SB
765 1019 119 (\(client ) 125 SB
890 1019 25 (- ) 31 SB
921 1019 113 (server ) 119 SB
1040 1019 229 (applications\) ) 235 SB
1275 1019 73 (and ) 79 SB
1354 1019 43 (to ) 49 SB
1403 1019 159 ("system" ) 165 SB
1568 1019 169 (processes ) 175 SB
1743 1019 76 (that ) 82 SB
1825 1019 138 (provide ) 144 SB
1969 1019 131 (security) 131 SB
374 1069 932 (context establishment services to application processes.) 932 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1216 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 1219 943 (Suitability for a range of implementation placements) 943 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1319 1428 (The GSS-API calling code need not reside within a trusted computer base perimeter.) 1428 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 1469 1156 (4. GSS-API Security Services and Need for Extensions) 1156 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 1578 77 (The ) 78 SB
378 1578 84 (base ) 85 SB
463 1578 168 (GSS-API ) 169 SB
632 1578 153 (supports ) 154 SB
786 1578 144 (services ) 146 SB
932 1578 88 (such ) 90 SB
1022 1578 46 (as ) 48 SB
1070 1578 129 (mutual ) 131 SB
1201 1578 252 (authentication ) 254 SB
1455 1578 73 (and ) 75 SB
1530 1578 82 (data ) 84 SB
1614 1578 255 (confidentiality ) 257 SB
1871 1578 73 (and ) 75 SB
1946 1578 154 (integrity.) 154 SB
300 1628 766 (As currently specified the base GSS-API can:) 766 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1724 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1728 952 (enable a client to form a secure association with a server) 952 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1824 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1828 1392 (permit a client and server protect their dialogue for integrity and/or confidentiality) 1392 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1924 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1928 1142 (allow a server to act as a client in calling another application server) 1142 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 2024 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 2028 103 (allow ) 104 SB
479 2028 199 (application ) 200 SB
679 2028 46 (or ) 47 SB
726 2028 125 (system ) 126 SB
852 2028 159 (selection ) 160 SB
1012 2028 44 (of ) 46 SB
1058 2028 142 (security ) 144 SB
1202 2028 215 (mechanism. ) 217 SB
1419 2028 101 (\(This ) 103 SB
1522 2028 119 (allows ) 121 SB
1643 2028 30 (a ) 32 SB
1675 2028 199 (application ) 201 SB
1876 2028 43 (to ) 45 SB
1921 2028 179 (participate) 179 SB
375 2078 1425 (in a variety of security contexts, using the security mechanism appropriate for each\).) 1425 SB
300 2228 77 (The ) 84 SB
384 2228 84 (base ) 91 SB
475 2228 168 (GSS-API ) 175 SB
650 2228 39 (is ) 46 SB
696 2228 187 (supportive ) 194 SB
890 2228 44 (of ) 51 SB
941 2228 30 (a ) 37 SB
978 2228 131 (limited ) 138 SB
1116 2228 92 (form ) 99 SB
1215 2228 44 (of ) 51 SB
1266 2228 233 (authorisation ) 240 SB
1506 2228 89 (\(i.e.: ) 96 SB
1602 2228 247 (identity-based ) 255 SB
1857 2228 116 (access ) 124 SB
1981 2228 119 (control) 119 SB
300 2278 104 (lists\). ) 105 SB
405 2278 57 (As ) 58 SB
463 2278 168 (GSS-API ) 169 SB
632 2278 39 (is ) 40 SB
672 2278 163 (currently ) 164 SB
836 2278 171 (specified, ) 172 SB
1008 2278 52 (an ) 53 SB
1061 2278 116 (access ) 117 SB
1178 2278 130 (control ) 131 SB
1309 2278 142 (security ) 144 SB
1453 2278 128 (service ) 130 SB
1583 2278 39 (is ) 41 SB
1624 2278 65 (not ) 67 SB
1691 2278 88 (fully ) 90 SB
1781 2278 187 (supported, ) 189 SB
1970 2278 130 (because) 130 SB
300 2328 45 (in ) 51 SB
351 2328 197 ([OSI-SEC] ) 203 SB
554 2328 30 (a ) 36 SB
590 2328 106 (wider ) 112 SB
702 2328 90 (view ) 97 SB
799 2328 44 (of ) 51 SB
850 2328 191 (distributed ) 198 SB
1048 2328 233 (authorisation ) 240 SB
1288 2328 39 (is ) 46 SB
1334 2328 170 (described ) 177 SB
1511 2328 86 (than ) 93 SB
1604 2328 247 (identity-based ) 254 SB
1858 2328 116 (access ) 123 SB
1981 2328 119 (control) 119 SB
300 2378 90 (lists. ) 94 SB
394 2378 234 (Additionally, ) 239 SB
633 2378 146 (controls ) 151 SB
784 2378 53 (on ) 58 SB
842 2378 186 (delegation ) 191 SB
1033 2378 63 (are ) 68 SB
1101 2378 166 (primitive ) 171 SB
1272 2378 45 (in ) 50 SB
1322 2378 63 (the ) 68 SB
1390 2378 84 (base ) 89 SB
1479 2378 168 (GSS-API ) 173 SB
1652 2378 73 (and ) 78 SB
1730 2378 94 (don't ) 99 SB
1829 2378 122 (permit ) 127 SB
1956 2378 144 (selective) 144 SB
300 2428 186 (delegation ) 191 SB
491 2428 44 (of ) 49 SB
540 2428 116 (access ) 121 SB
661 2428 109 (rights ) 114 SB
775 2428 43 (to ) 48 SB
823 2428 139 (specific ) 144 SB
967 2428 135 (targets. ) 140 SB
1107 2428 149 (Without ) 155 SB
1262 2428 147 (changes ) 153 SB
1415 2428 43 (to ) 49 SB
1464 2428 63 (the ) 69 SB
1533 2428 168 (GSS-API ) 174 SB
1707 2428 158 (interface ) 164 SB
1871 2428 43 (to ) 49 SB
1920 2428 180 (adequately) 180 SB
300 2478 137 (support ) 145 SB
445 2478 116 (access ) 124 SB
569 2478 141 (control, ) 150 SB
719 2478 30 (a ) 39 SB
758 2478 91 (wide ) 100 SB
858 2478 92 (class ) 101 SB
959 2478 44 (of ) 53 SB
1012 2478 191 (distributed ) 200 SB
1212 2478 215 (applications ) 224 SB
1436 2478 63 (are ) 72 SB
1508 2478 176 (prevented ) 185 SB
1693 2478 92 (from ) 101 SB
1794 2478 104 (being ) 113 SB
1907 2478 193 (mechanism) 193 SB
300 2528 218 (independent.) 218 SB
300 2628 127 (Hence, ) 139 SB
439 2628 30 (a ) 42 SB
481 2628 57 (set ) 69 SB
550 2628 44 (of ) 56 SB
606 2628 271 (complementary ) 283 SB
889 2628 94 (APIs ) 107 SB
996 2628 63 (are ) 76 SB
1072 2628 152 (required ) 165 SB
1237 2628 43 (to ) 56 SB
1293 2628 138 (provide ) 151 SB
1444 2628 97 (these ) 110 SB
1554 2628 156 (essential ) 169 SB
1723 2628 142 (security ) 155 SB
1878 2628 155 (facilities ) 168 SB
2046 2628 54 (not) 54 SB
300 2678 1229 (accessible through GSS-API as currently defined. These include support ) 1230 SB
1530 2678 59 (for ) 60 SB
1590 2678 233 (authorisation ) 234 SB
1824 2678 105 (based ) 106 SB
1930 2678 53 (on ) 54 SB
1984 2678 116 (subject) 116 SB
300 2728 176 (privileges ) 179 SB
479 2728 73 (and ) 76 SB
555 2728 197 (controlling ) 200 SB
755 2728 63 (the ) 66 SB
821 2728 124 (targets ) 127 SB
948 2728 114 (which ) 117 SB
1065 2728 70 (can ) 73 SB
1138 2728 66 (use ) 69 SB
1207 2728 194 (credentials ) 198 SB
1405 2728 59 (for ) 63 SB
1468 2728 116 (access ) 120 SB
1588 2728 130 (control ) 134 SB
1722 2728 46 (or ) 50 SB
1772 2728 59 (for ) 63 SB
1835 2728 197 (delegation, ) 201 SB
2036 2728 64 (i.e.:) 64 SB
300 2778 841 (forwarding them to other targets for use by proxy.) 841 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (3) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 4 4
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
300 269 326 (Such extensions to ) 327 SB
627 269 168 (GSS-API ) 169 SB
796 269 63 (are ) 64 SB
860 269 136 (defined ) 137 SB
997 269 45 (in ) 46 SB
1043 269 173 ([RFC-19] ) 174 SB
1217 269 73 (and ) 74 SB
1291 269 63 (are ) 64 SB
1355 269 142 (restated ) 143 SB
1498 269 73 (and ) 74 SB
1572 269 170 (discussed ) 171 SB
1743 269 45 (in ) 46 SB
1789 269 73 (this ) 74 SB
1863 269 105 (paper ) 106 SB
1969 269 43 (to ) 44 SB
2013 269 87 (show) 87 SB
300 319 165 (how they:) 165 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 415 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 419 1680 (allow a server to obtain attributes associated with a client for use in its own access control decisions) 1680 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 515 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 519 1534 (permit a client to specify required access control attributes, and the constraints on their use) 1534 SB
300 669 951 (When used in conjunction with [GSS-DCE] extensions, ) 952 SB
1252 669 63 (the ) 64 SB
1316 669 173 ([RFC-19] ) 174 SB
1490 669 94 (APIs ) 95 SB
1585 669 120 (enable ) 121 SB
1706 669 148 (portable ) 149 SB
1855 669 116 (access ) 117 SB
1972 669 43 (to ) 44 SB
2016 669 84 (DCE) 84 SB
300 719 286 (security services.) 286 SB
300 869 47 (In ) 49 SB
349 869 150 (addition ) 152 SB
501 869 43 (to ) 46 SB
547 869 63 (the ) 66 SB
613 869 94 (APIs ) 97 SB
710 869 136 (defined ) 139 SB
849 869 45 (in ) 48 SB
897 869 184 ([RFC-19], ) 187 SB
1084 869 98 (some ) 101 SB
1185 869 271 (complementary ) 274 SB
1459 869 135 (generic ) 138 SB
1597 869 94 (APIs ) 97 SB
1694 869 114 (which ) 117 SB
1811 869 63 (are ) 66 SB
1877 869 187 (supportive ) 190 SB
2067 869 33 (of) 33 SB
300 919 664 (delegation are considered in this paper.) 664 SB
300 1069 53 (At ) 60 SB
360 1069 98 (some ) 106 SB
466 1069 108 (stage, ) 116 SB
582 1069 98 (other ) 106 SB
688 1069 199 (application ) 207 SB
895 1069 142 (security ) 150 SB
1045 1069 144 (services ) 152 SB
1197 1069 65 (not ) 73 SB
1270 1069 162 (available ) 170 SB
1440 1069 144 (through ) 152 SB
1592 1069 63 (the ) 71 SB
1663 1069 84 (base ) 92 SB
1755 1069 168 (GSS-API ) 176 SB
1931 1069 123 (should ) 131 SB
2062 1069 38 (be) 38 SB
300 1119 147 (defined, ) 172 SB
472 1119 172 (including ) 197 SB
669 1119 163 (principal ) 188 SB
857 1119 263 (authentication, ) 288 SB
1145 1119 82 (data ) 107 SB
1252 1119 293 (non-repudiation, ) 318 SB
1570 1119 82 (data ) 107 SB
1677 1119 170 (labelling, ) 196 SB
1873 1119 73 (and ) 99 SB
1972 1119 128 (making) 128 SB
300 1169 233 (authorisation ) 244 SB
544 1169 177 (decisions. ) 188 SB
732 1169 127 (Hence, ) 138 SB
870 1169 59 (for ) 70 SB
940 1169 163 (complete ) 174 SB
1114 1169 160 (coverage ) 171 SB
1285 1169 44 (of ) 55 SB
1340 1169 142 (security ) 154 SB
1494 1169 155 (services, ) 167 SB
1661 1169 148 (portable ) 160 SB
1821 1169 94 (APIs ) 106 SB
1927 1169 123 (should ) 135 SB
2062 1169 38 (be) 38 SB
300 1219 411 (specified in these areas. ) 412 SB
712 1219 111 (These ) 112 SB
824 1219 78 (API ) 79 SB
903 1219 98 (areas ) 99 SB
1002 1219 63 (are ) 64 SB
1066 1219 65 (not ) 66 SB
1132 1219 192 (considered ) 193 SB
1325 1219 127 (further ) 128 SB
1453 1219 45 (in ) 46 SB
1499 1219 73 (this ) 74 SB
1573 1219 116 (paper, ) 117 SB
1690 1219 64 (but ) 65 SB
1755 1219 35 (it ) 36 SB
1791 1219 39 (is ) 40 SB
1831 1219 104 (noted ) 105 SB
1936 1219 76 (that ) 77 SB
2013 1219 87 (some) 87 SB
300 1269 1598 (are the subject of current work in the SESAME project, IETF, and recent initiatives in POSIX.) 1598 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 1419 959 (5. Overview of the Base GSS-API and its Use) 959 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 1528 37 (It ) 43 SB
343 1528 39 (is ) 46 SB
389 1528 79 (first ) 86 SB
475 1528 177 (important ) 184 SB
659 1528 43 (to ) 50 SB
709 1528 83 (note ) 90 SB
799 1528 76 (that ) 83 SB
882 1528 104 (many ) 111 SB
993 1528 199 (application ) 206 SB
1199 1528 190 (developers ) 197 SB
1396 1528 52 (do ) 59 SB
1455 1528 65 (not ) 72 SB
1527 1528 90 (need ) 97 SB
1624 1528 43 (to ) 50 SB
1674 1528 49 (be ) 56 SB
1730 1528 111 (aware ) 118 SB
1848 1528 44 (of ) 51 SB
1899 1528 63 (the ) 70 SB
1969 1528 131 (security) 131 SB
300 1578 146 (controls ) 152 SB
452 1578 73 (and ) 79 SB
531 1578 134 (options ) 140 SB
671 1578 45 (in ) 51 SB
722 1578 77 (use. ) 83 SB
805 1578 123 (Where ) 129 SB
934 1578 142 (security ) 148 SB
1082 1578 39 (is ) 45 SB
1127 1578 181 (integrated ) 187 SB
1314 1578 77 (into ) 83 SB
1397 1578 63 (the ) 69 SB
1466 1578 289 (communications ) 295 SB
1761 1578 251 (infrastructure, ) 258 SB
2019 1578 81 (most) 81 SB
300 1628 142 (security ) 146 SB
446 1628 121 (details ) 125 SB
571 1628 70 (can ) 74 SB
645 1628 49 (be ) 53 SB
698 1628 135 (applied ) 139 SB
837 1628 139 (without ) 143 SB
980 1628 63 (the ) 67 SB
1047 1628 199 (application ) 203 SB
1250 1628 127 (having ) 131 SB
1381 1628 43 (to ) 47 SB
1428 1628 81 (take ) 85 SB
1513 1628 71 (any ) 75 SB
1588 1628 125 (action. ) 129 SB
1717 1628 77 (The ) 81 SB
1798 1628 239 (administrator ) 243 SB
2041 1628 59 (can) 59 SB
300 1678 128 (specify ) 143 SB
443 1678 127 (default ) 142 SB
585 1678 117 (values ) 132 SB
717 1678 59 (for ) 74 SB
791 1678 142 (security ) 157 SB
948 1678 197 (parameters ) 212 SB
1160 1678 182 (associated ) 197 SB
1357 1678 86 (with ) 101 SB
1458 1678 108 (either ) 124 SB
1582 1678 63 (the ) 79 SB
1661 1678 105 (user's ) 121 SB
1782 1678 76 (role ) 92 SB
1874 1678 46 (or ) 62 SB
1936 1678 164 (particular) 164 SB
300 1728 215 (applications ) 235 SB
535 1728 73 (and ) 93 SB
628 1728 97 (these ) 117 SB
745 1728 63 (are ) 83 SB
828 1728 87 (used ) 107 SB
935 1728 239 (automatically ) 259 SB
1194 1728 116 (unless ) 137 SB
1331 1728 63 (the ) 84 SB
1415 1728 199 (application ) 220 SB
1635 1728 155 (specifies ) 176 SB
1811 1728 184 (otherwise. ) 205 SB
2016 1728 84 (Such) 84 SB
300 1778 429 (applications/components ) 432 SB
732 1778 123 (should ) 126 SB
858 1778 49 (be ) 52 SB
910 1778 80 (able ) 83 SB
993 1778 43 (to ) 46 SB
1039 1778 66 (use ) 70 SB
1109 1778 156 (standard ) 160 SB
1269 1778 123 (library ) 127 SB
1396 1778 174 (interfaces ) 178 SB
1574 1778 102 (\(such ) 106 SB
1680 1778 46 (as ) 50 SB
1730 1778 81 (XTI ) 85 SB
1815 1778 46 (or ) 50 SB
1865 1778 103 (RPC\) ) 107 SB
1972 1778 128 (without) 128 SB
300 1828 1453 (recourse to security APIs \(such as GSS-API\) - if the communications library is secure.) 1453 SB
300 1928 105 (Some ) 109 SB
409 1928 215 (applications ) 219 SB
628 1928 63 (are ) 68 SB
696 1928 97 (more ) 102 SB
798 1928 142 (security ) 147 SB
945 1928 111 (aware ) 116 SB
1061 1928 73 (and ) 78 SB
1139 1928 93 (want ) 98 SB
1237 1928 97 (more ) 102 SB
1339 1928 137 (explicit ) 142 SB
1481 1928 130 (control ) 135 SB
1616 1928 44 (of ) 49 SB
1665 1928 63 (the ) 68 SB
1733 1928 142 (security ) 147 SB
1880 1928 144 (services ) 149 SB
2029 1928 71 (they) 71 SB
300 1978 83 (call. ) 85 SB
385 1978 87 (This ) 89 SB
474 1978 78 (also ) 80 SB
554 1978 130 (applies ) 132 SB
686 1978 43 (to ) 45 SB
731 1978 71 (any ) 73 SB
804 1978 117 (secure ) 119 SB
923 1978 289 (communications ) 291 SB
1214 1978 251 (infrastructure. ) 253 SB
1467 1978 95 (Such ) 97 SB
1564 1978 256 (security-aware ) 258 SB
1822 1978 153 (software ) 156 SB
1978 1978 122 (entities) 122 SB
300 2028 82 (may ) 87 SB
387 2028 162 (therefore ) 167 SB
554 2028 67 (ask ) 72 SB
626 2028 59 (for ) 64 SB
690 2028 71 (any ) 76 SB
766 2028 205 (non-default ) 210 SB
976 2028 142 (security ) 147 SB
1123 2028 144 (services ) 149 SB
1272 2028 43 (to ) 48 SB
1320 2028 49 (be ) 55 SB
1375 2028 98 (used, ) 104 SB
1479 2028 59 (for ) 65 SB
1544 2028 164 (example, ) 170 SB
1714 2028 43 (to ) 49 SB
1763 2028 122 (reduce ) 128 SB
1891 2028 63 (the ) 69 SB
1960 2028 86 (time ) 92 SB
2052 2028 48 (for) 48 SB
300 2078 114 (which ) 120 SB
420 2078 194 (credentials ) 200 SB
620 2078 70 (can ) 76 SB
696 2078 49 (be ) 55 SB
751 2078 87 (used ) 94 SB
845 2078 73 (and ) 80 SB
925 2078 114 (which ) 121 SB
1046 2078 124 (targets ) 131 SB
1177 2078 82 (they ) 89 SB
1266 2078 70 (can ) 77 SB
1343 2078 49 (be ) 56 SB
1399 2078 87 (used ) 94 SB
1493 2078 97 (with. ) 104 SB
1597 2078 96 (They ) 103 SB
1700 2078 82 (may ) 89 SB
1789 2078 78 (also ) 85 SB
1874 2078 93 (want ) 100 SB
1974 2078 126 (explicit) 126 SB
300 2128 1548 (control of delegation. A mechanism-independent security API is required for such software.) 1548 SB
300 2228 77 (The ) 79 SB
379 2228 184 (remainder ) 186 SB
565 2228 44 (of ) 46 SB
611 2228 73 (this ) 75 SB
686 2228 129 (section ) 131 SB
817 2228 98 (gives ) 100 SB
917 2228 52 (an ) 54 SB
971 2228 89 (brief ) 91 SB
1062 2228 163 (overview ) 165 SB
1227 2228 44 (of ) 46 SB
1273 2228 179 (GSS-API. ) 181 SB
1454 2228 91 (\(The ) 93 SB
1547 2228 117 (reader ) 119 SB
1666 2228 39 (is ) 42 SB
1708 2228 144 (referred ) 147 SB
1855 2228 43 (to ) 46 SB
1901 2228 63 (the ) 66 SB
1967 2228 133 (original) 133 SB
300 2278 74 (text ) 76 SB
376 2278 45 (in ) 47 SB
423 2278 196 ([GSS-API] ) 198 SB
621 2278 59 (for ) 61 SB
682 2278 146 (details\). ) 148 SB
830 2278 77 (The ) 79 SB
909 2278 78 (API ) 80 SB
989 2278 154 (provides ) 156 SB
1145 2278 30 (a ) 32 SB
1177 2278 140 (number ) 142 SB
1319 2278 44 (of ) 47 SB
1366 2278 174 (interfaces ) 177 SB
1543 2278 63 (the ) 66 SB
1609 2278 92 (most ) 95 SB
1704 2278 177 (important ) 180 SB
1884 2278 44 (of ) 47 SB
1931 2278 114 (which ) 117 SB
2048 2278 52 (are) 52 SB
300 2328 328 (grouped as follows:) 328 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 321 3231 0 0 CB
301 2425 20 (\267) 20 SB
gr
gs 321 3231 0 0 CB
300 2425 20 (\267) 20 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 2428 361 (Credential handling) 361 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2528 63 (An ) 65 SB
439 2528 237 (authenticated ) 239 SB
678 2528 142 (security ) 144 SB
822 2528 127 (subject ) 129 SB
951 2528 168 (possesses ) 170 SB
1121 2528 30 (a ) 32 SB
1153 2528 57 (set ) 60 SB
1213 2528 44 (of ) 47 SB
1260 2528 142 (security ) 145 SB
1405 2528 168 (attributes ) 171 SB
1576 2528 98 (\(e.g.: ) 101 SB
1677 2528 104 (ticket ) 107 SB
1784 2528 46 (or ) 49 SB
1833 2528 192 (certificate\) ) 195 SB
2028 2528 50 (by ) 53 SB
2081 2528 19 (a) 19 SB
374 2578 142 (security ) 145 SB
519 2578 215 (mechanism. ) 218 SB
737 2578 87 (This ) 90 SB
827 2578 57 (set ) 60 SB
887 2578 44 (of ) 47 SB
934 2578 168 (attributes ) 171 SB
1105 2578 39 (is ) 42 SB
1147 2578 197 (generically ) 200 SB
1347 2578 144 (referred ) 147 SB
1494 2578 43 (to ) 47 SB
1541 2578 46 (as ) 50 SB
1591 2578 228 ("credentials" ) 232 SB
1823 2578 50 (by ) 54 SB
1877 2578 168 (GSS-API ) 172 SB
2049 2578 51 (via) 51 SB
374 2628 52 (an ) 56 SB
430 2628 131 (opaque ) 135 SB
565 2628 211 ("credentials ) 215 SB
780 2628 153 (handle". ) 157 SB
937 2628 204 (Credentials ) 208 SB
1145 2628 104 (scope ) 108 SB
1253 2628 63 (the ) 67 SB
1320 2628 172 (allowable ) 176 SB
1496 2628 142 (security ) 146 SB
1642 2628 126 (related ) 130 SB
1772 2628 130 (actions ) 134 SB
1906 2628 76 (that ) 81 SB
1987 2628 70 (can ) 75 SB
2062 2628 38 (be) 38 SB
374 2678 211 (undertaken. ) 229 SB
603 2678 77 (The ) 96 SB
699 2678 81 (user ) 100 SB
799 2678 127 (calling ) 146 SB
945 2678 168 (GSS-API ) 187 SB
1132 2678 93 (must ) 112 SB
1244 2678 162 (therefore ) 181 SB
1425 2678 116 (obtain ) 135 SB
1560 2678 204 (appropriate ) 223 SB
1783 2678 194 (credentials ) 213 SB
1996 2678 104 (before) 104 SB
374 2728 193 (attempting ) 203 SB
577 2728 43 (to ) 53 SB
630 2728 92 (form ) 102 SB
732 2728 142 (security ) 152 SB
884 2728 161 (contexts. ) 171 SB
1055 2728 169 (Typically ) 179 SB
1234 2728 73 (this ) 83 SB
1317 2728 76 (will ) 86 SB
1403 2728 135 (involve ) 145 SB
1548 2728 30 (a ) 41 SB
1589 2728 346 (mechanism-specific ) 357 SB
1946 2728 154 ("network) 154 SB
374 2778 229 (login" action.) 229 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (4) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 5 5
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
374 269 168 (GSS-API ) 172 SB
546 269 97 (users ) 101 SB
647 269 82 (may ) 87 SB
734 269 135 (acquire ) 140 SB
874 269 73 (and ) 78 SB
952 269 143 (manage ) 148 SB
1100 269 129 (several ) 134 SB
1234 269 205 (credentials. ) 210 SB
1444 269 77 (The ) 82 SB
1526 269 104 (scope ) 109 SB
1635 269 44 (of ) 49 SB
1684 269 178 (credential ) 183 SB
1867 269 141 (handles ) 146 SB
2013 269 87 (\(e.g.:) 87 SB
374 319 948 (single or multiple processes\) is implementation-defined.) 948 SB
32 0 0 42 42 0 0 0 38 /Times-Italic /font31 ANSIFont font
374 419 676 (CREDENTIAL MANAGEMENT CALLS) 676 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 519 325 (GSS_Acquire_cred) 325 SB
744 519 443 (acquire credentials for use) 443 SB
374 619 313 (GSS_Inquire_cred) 313 SB
744 619 628 (display information about credentials) 628 SB
374 719 318 (GSS_Release_cred) 318 SB
744 719 464 (release credentials after use) 464 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 866 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 869 469 (Security Context handling) 469 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 969 160 (Contexts ) 168 SB
542 969 63 (are ) 71 SB
613 969 197 (established ) 206 SB
819 969 148 (between ) 157 SB
976 969 99 (peers ) 108 SB
1084 969 103 (using ) 112 SB
1196 969 194 (credentials ) 203 SB
1399 969 156 (acquired ) 165 SB
1564 969 50 (by ) 59 SB
1623 969 63 (the ) 72 SB
1695 969 227 (participating ) 236 SB
1931 969 169 (processes.) 169 SB
374 1019 168 (GSS-API ) 184 SB
558 1019 134 (options ) 150 SB
708 1019 59 (for ) 75 SB
783 1019 129 (mutual ) 145 SB
928 1019 263 (authentication, ) 279 SB
1207 1019 197 (delegation, ) 213 SB
1420 1019 310 (replay-protection, ) 326 SB
1746 1019 164 (detection ) 180 SB
1926 1019 44 (of ) 60 SB
1986 1019 114 (out-of-) 114 SB
374 1069 1583 (sequence messages are available \(if supported by the security mechanism and security policy\).) 1583 SB
374 1169 132 (During ) 133 SB
507 1169 142 (security ) 143 SB
650 1169 134 (context ) 135 SB
785 1169 243 (establishment ) 244 SB
1029 1169 30 (a ) 31 SB
1060 1169 135 (process ) 136 SB
1196 1169 232 (authenticates ) 234 SB
1430 1169 94 (itself ) 96 SB
1526 1169 43 (to ) 45 SB
1571 1169 63 (the ) 65 SB
1636 1169 98 (other ) 100 SB
1736 1169 227 (participating ) 229 SB
1965 1169 135 (process.) 135 SB
374 1219 57 (To ) 64 SB
438 1219 52 (do ) 59 SB
497 1219 73 (this ) 80 SB
577 1219 35 (it ) 42 SB
619 1219 148 (requests ) 155 SB
774 1219 30 (a ) 37 SB
811 1219 142 (security ) 149 SB
960 1219 104 (token ) 111 SB
1071 1219 92 (from ) 99 SB
1170 1219 63 (the ) 70 SB
1240 1219 142 (security ) 149 SB
1389 1219 204 (mechanism ) 212 SB
1601 1219 114 (which ) 122 SB
1723 1219 35 (it ) 43 SB
1766 1219 117 (passes ) 125 SB
1891 1219 43 (to ) 51 SB
1942 1219 63 (the ) 71 SB
2013 1219 87 (other) 87 SB
374 1269 146 (process. ) 148 SB
522 1269 87 (This ) 89 SB
611 1269 108 (target ) 110 SB
721 1269 135 (process ) 137 SB
858 1269 85 (then ) 87 SB
945 1269 82 (uses ) 84 SB
1029 1269 63 (the ) 65 SB
1094 1269 142 (security ) 144 SB
1238 1269 204 (mechanism ) 206 SB
1444 1269 43 (to ) 45 SB
1489 1269 216 (authenticate ) 218 SB
1707 1269 63 (the ) 65 SB
1772 1269 116 (token; ) 118 SB
1890 1269 52 (an ) 54 SB
1944 1269 156 (authentic) 156 SB
374 1319 104 (token ) 112 SB
486 1319 39 (is ) 47 SB
533 1319 168 (sufficient ) 176 SB
709 1319 43 (to ) 51 SB
760 1319 105 (prove ) 113 SB
873 1319 63 (the ) 71 SB
944 1319 210 (authenticity ) 218 SB
1162 1319 44 (of ) 52 SB
1214 1319 63 (the ) 71 SB
1285 1319 132 (sender. ) 140 SB
1425 1319 187 (Successful ) 195 SB
1620 1319 252 (authentication ) 260 SB
1880 1319 192 (establishes ) 201 SB
2081 1319 19 (a) 19 SB
374 1369 276 (security context.) 276 SB
374 1469 149 (Security ) 152 SB
526 1469 150 (contexts ) 154 SB
680 1469 82 (may ) 86 SB
766 1469 90 (have ) 94 SB
860 1469 30 (a ) 34 SB
894 1469 100 (finite ) 104 SB
998 1469 77 (life, ) 81 SB
1079 1469 45 (in ) 49 SB
1128 1469 114 (which ) 118 SB
1246 1469 82 (case ) 86 SB
1332 1469 35 (it ) 39 SB
1371 1469 76 (will ) 80 SB
1451 1469 172 (necessary ) 176 SB
1627 1469 43 (to ) 47 SB
1674 1469 114 (repeat ) 118 SB
1792 1469 63 (the ) 67 SB
1859 1469 241 (authentication) 241 SB
374 1519 846 (sequence if the life of the association exceeds this.) 846 SB
374 1619 77 (The ) 78 SB
452 1619 135 (content ) 136 SB
588 1619 44 (of ) 45 SB
633 1619 63 (the ) 64 SB
697 1619 142 (security ) 143 SB
840 1619 104 (token ) 105 SB
945 1619 39 (is ) 40 SB
985 1619 84 (only ) 86 SB
1071 1619 204 (meaningful ) 206 SB
1277 1619 43 (to ) 45 SB
1322 1619 63 (the ) 65 SB
1387 1619 142 (security ) 144 SB
1531 1619 216 (mechanism; ) 218 SB
1749 1619 63 (the ) 65 SB
1814 1619 168 (GSS-API ) 170 SB
1984 1619 116 (calling) 116 SB
374 1669 88 (code ) 93 SB
467 1669 123 (should ) 128 SB
595 1669 65 (not ) 70 SB
665 1669 138 (attempt ) 143 SB
808 1669 43 (to ) 48 SB
856 1669 156 (interpret ) 161 SB
1017 1669 35 (it ) 40 SB
1057 1669 137 (\(indeed ) 143 SB
1200 1669 30 (a ) 36 SB
1236 1669 117 (strong ) 123 SB
1359 1669 142 (security ) 148 SB
1507 1669 204 (mechanism ) 210 SB
1717 1669 82 (may ) 88 SB
1805 1669 295 (cryptographically) 295 SB
374 1719 657 (protect some or all of the information\).) 657 SB
374 1819 41 (A ) 49 SB
423 1819 135 (process ) 143 SB
566 1819 82 (may ) 90 SB
656 1819 158 (establish ) 166 SB
822 1819 152 (multiple ) 160 SB
982 1819 150 (contexts ) 158 SB
1140 1819 86 (with ) 94 SB
1234 1819 71 (one ) 79 SB
1313 1819 46 (or ) 54 SB
1367 1819 97 (more ) 105 SB
1472 1819 98 (other ) 106 SB
1578 1819 180 (processes, ) 189 SB
1767 1819 103 (using ) 112 SB
1879 1819 71 (one ) 80 SB
1959 1819 46 (or ) 55 SB
2014 1819 86 (more) 86 SB
374 1869 194 (credentials.) 194 SB
32 0 0 42 42 0 0 0 38 /Times-Italic /font31 ANSIFont font
374 1969 453 (CONTEXT-LEVEL CALLS) 453 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2069 374 (GSS_Init_sec_context) 374 SB
892 2069 563 (initiate outbound security context) 563 SB
374 2169 431 (GSS_Accept_sec_context) 431 SB
892 2169 531 (accept inbound security context) 531 SB
374 2269 422 (GSS_Delete_sec_context) 422 SB
892 2269 621 (flush context when no longer needed) 621 SB
374 2369 481 (GSS_Process_context_token) 481 SB
892 2369 696 (process received control token on context) 696 SB
374 2469 326 (GSS_Context_time) 326 SB
892 2469 730 (indicate validity time remaining on context) 730 SB
374 2619 57 (As ) 61 SB
435 2619 78 (part ) 82 SB
517 2619 44 (of ) 48 SB
565 2619 142 (security ) 146 SB
711 2619 134 (context ) 138 SB
849 2619 254 (establishment, ) 258 SB
1107 2619 11 ( ) 15 SB
1122 2619 385 (GSS_Init_sec_context ) 389 SB
1511 2619 39 (is ) 43 SB
1554 2619 111 (called ) 115 SB
1669 2619 43 (to ) 47 SB
1716 2619 116 (obtain ) 121 SB
1837 2619 30 (a ) 35 SB
1872 2619 228 (caller-opaque) 228 SB
374 2669 142 (security ) 143 SB
517 2669 104 (token ) 106 SB
623 2669 43 (to ) 45 SB
668 2669 49 (be ) 51 SB
719 2669 79 (sent ) 81 SB
800 2669 43 (to ) 45 SB
845 2669 63 (the ) 65 SB
910 2669 98 (other ) 100 SB
1010 2669 146 (process. ) 148 SB
1158 2669 87 (This ) 89 SB
1247 2669 158 (interface ) 160 SB
1407 2669 39 (is ) 41 SB
1448 2669 111 (called ) 113 SB
1561 2669 50 (by ) 52 SB
1613 2669 30 (a ) 32 SB
1645 2669 105 (client ) 107 SB
1752 2669 117 (\(using ) 119 SB
1871 2669 63 (the ) 65 SB
1936 2669 127 (default ) 129 SB
2065 2669 35 (or) 35 SB
374 2719 1551 (specified credentials\) to obtain the security information needed to initiate a security context.) 1551 SB
374 2819 77 (The ) 92 SB
466 2819 167 (receiving ) 182 SB
648 2819 135 (process ) 150 SB
798 2819 114 (which ) 130 SB
928 2819 133 (accepts ) 149 SB
1077 2819 95 (valid ) 111 SB
1188 2819 142 (security ) 158 SB
1346 2819 150 (contexts ) 166 SB
1512 2819 82 (uses ) 98 SB
1610 2819 442 (GSS_Accept_sec_context ) 458 SB
2068 2819 32 (to) 32 SB
374 2869 769 ("validate" the security token. The underlying ) 770 SB
1144 2869 204 (mechanism ) 205 SB
1349 2869 153 (software ) 154 SB
1503 2869 160 (validates ) 161 SB
1664 2869 63 (the ) 64 SB
1728 2869 171 (incoming ) 172 SB
1900 2869 200 (information) 200 SB
374 2919 1228 (and authorises use of the association. It sets up credentials for the server.) 1228 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (5) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Italic
%%+ font Times-Roman
%%Page: 6 6
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
374 269 317 (Diagrammatically:) 317 SB
32 0 0 33 33 0 0 0 27 /Courier /font0 ANSIFont font
374 367 120 (CLIENT) 120 SB
744 367 200 (COMMS LINK) 200 SB
1188 367 120 (SERVER) 120 SB
374 439 360 (GSS_Acquire_cred\(\)) 360 SB
1188 439 360 (GSS_Acquire_cred\(\)) 360 SB
374 511 440 (GSS_Init_sec_context\(\)) 440 SB
1040 511 180 (         ) 180 SB
1780 511 20 (|) 20 SB
374 547 260 (returns token) 260 SB
1188 547 40 (  ) 40 SB
1632 547 60 (   ) 60 SB
1780 547 20 (|) 20 SB
1780 583 20 (|) 20 SB
374 619 220 (send\(token\)) 220 SB
596 619 320 (--------------->) 320 SB
1040 619 180 (receive\(\)) 180 SB
1336 619 20 ( ) 20 SB
1780 619 20 (|) 20 SB
1188 655 280 (returns token ) 280 SB
1780 655 20 (|) 20 SB
1780 691 20 (|) 20 SB
1188 727 440 (GSS_Accept_sec_context) 440 SB
1780 727 20 (|) 20 SB
1336 763 160 (\(token\) ) 160 SB
1780 763 20 (|) 20 SB
1188 799 460 (returns authentic = Y/N) 460 SB
1780 799 20 (|) 20 SB
1780 835 20 (|) 20 SB
1188 871 40 (or) 40 SB
1780 871 20 (|) 20 SB
1780 907 20 (|) 20 SB
1188 943 440 (GSS_Accept_sec_context) 440 SB
1780 943 20 (|) 20 SB
1336 979 160 (\(token\) ) 160 SB
1780 979 20 (|) 20 SB
1336 1015 280 (returns token2) 280 SB
1780 1015 20 (|) 20 SB
1780 1051 20 (|) 20 SB
374 1087 180 (receive\(\)) 180 SB
744 1087 340 (<----------------) 340 SB
1188 1087 400 (send\(token2\) returns) 400 SB
1780 1087 20 (|) 20 SB
1188 1123 120 (token2) 120 SB
1780 1123 20 (|) 20 SB
374 1159 560 (GSS_Init_sec_context\(token2\)) 560 SB
1780 1159 20 (|) 20 SB
374 1195 460 (returns authentic = Y/N) 460 SB
1780 1195 20 (|) 20 SB
1780 1231 20 (|) 20 SB
374 1267 40 (or) 40 SB
1780 1267 20 (|) 20 SB
1780 1303 20 (|) 20 SB
374 1339 560 (GSS_Init_sec_context\(token2\)) 560 SB
1780 1339 40 (|.) 40 SB
374 1375 360 (returns token ....) 360 SB
1780 1375 60 (| .) 60 SB
1780 1411 60 (| .) 60 SB
1336 1447 180 (         ) 180 SB
1780 1447 60 (  .) 60 SB
374 1483 460 (repeated as required by) 460 SB
1188 1483 40 (  ) 40 SB
1780 1483 60 (  .) 60 SB
374 1519 1400 (the mechanism.........................................................) 1400 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1657 112 (When ) 127 SB
501 1657 30 (a ) 45 SB
546 1657 180 (successful ) 195 SB
741 1657 385 (GSS_Init_sec_context ) 400 SB
1141 1657 68 (has ) 83 SB
1224 1657 89 (been ) 104 SB
1328 1657 185 (performed ) 200 SB
1528 1657 45 (in ) 60 SB
1588 1657 63 (the ) 78 SB
1666 1657 116 (client, ) 131 SB
1797 1657 73 (and ) 88 SB
1885 1657 30 (a ) 46 SB
1931 1657 169 (successful) 169 SB
374 1707 510 (GSS_Accept_sec_context has ) 511 SB
885 1707 89 (been ) 90 SB
975 1707 185 (performed ) 186 SB
1161 1707 45 (in ) 46 SB
1207 1707 63 (the ) 64 SB
1271 1707 113 (server ) 114 SB
1385 1707 85 (then ) 86 SB
1471 1707 30 (a ) 31 SB
1502 1707 117 (secure ) 118 SB
1620 1707 134 (context ) 135 SB
1755 1707 68 (has ) 69 SB
1824 1707 89 (been ) 90 SB
1914 1707 186 (established) 186 SB
374 1757 597 (for the association \(and optionally, ) 598 SB
972 1757 30 (a ) 31 SB
1003 1757 57 (set ) 58 SB
1061 1757 44 (of ) 45 SB
1106 1757 171 (delegated ) 172 SB
1278 1757 105 (client ) 106 SB
1384 1757 194 (credentials ) 195 SB
1579 1757 68 (has ) 69 SB
1648 1757 89 (been ) 90 SB
1738 1757 102 (made ) 103 SB
1841 1757 162 (available ) 163 SB
2004 1757 43 (to ) 44 SB
2048 1757 52 (the) 52 SB
374 1807 1153 (server\). The server application is now available for use by the client.) 1153 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 321 3231 0 0 CB
301 1954 20 (\267) 20 SB
gr
gs 321 3231 0 0 CB
300 1954 20 (\267) 20 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 1957 602 (Protection of application dialogue) 602 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2057 210 (Application ) 216 SB
590 2057 211 (information ) 217 SB
807 2057 122 (passed ) 128 SB
935 2057 148 (between ) 154 SB
1089 2057 142 (security ) 148 SB
1237 2057 134 (context ) 140 SB
1377 2057 99 (peers ) 105 SB
1482 2057 82 (may ) 89 SB
1571 2057 90 (need ) 97 SB
1668 2057 244 (cryptographic ) 251 SB
1919 2057 181 (protection.) 181 SB
374 2107 497 (Security mechanism services ) 498 SB
872 2107 43 (to ) 44 SB
916 2107 103 (apply ) 104 SB
1020 2107 220 (per-message ) 221 SB
1241 2107 154 (integrity ) 155 SB
1396 2107 73 (and ) 74 SB
1470 2107 255 (confidentiality ) 256 SB
1726 2107 63 (are ) 64 SB
1790 2107 176 (supported ) 177 SB
1967 2107 133 (through) 133 SB
374 2157 168 (GSS-API.) 168 SB
32 0 0 42 42 0 0 0 38 /Times-Italic /font31 ANSIFont font
374 2257 408 (PER-MESSAGE CALLS) 408 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2357 175 (GSS_Sign) 175 SB
744 2357 943 (apply signature, receive as token separate from message) 943 SB
374 2457 204 (GSS_Verify) 204 SB
744 2457 747 (validate signature token along with message) 747 SB
374 2557 169 (GSS_Seal) 169 SB
744 2557 616 (sign, optionally encrypt, encapsulate) 616 SB
374 2657 213 (GSS_Unseal) 213 SB
744 2657 828 (decapsulate, decrypt if needed, validate signature) 828 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (6) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Italic
%%+ font Times-Roman
%%Page: 7 7
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 42 /Symbol font
gs 321 3231 0 0 CB
301 266 20 (\267) 20 SB
gr
gs 321 3231 0 0 CB
300 266 20 (\267) 20 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 269 242 (Support APIs) 242 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 369 41 (A ) 42 SB
416 369 140 (number ) 142 SB
558 369 44 (of ) 46 SB
604 369 137 (support ) 139 SB
743 369 144 (services ) 146 SB
889 369 63 (are ) 65 SB
954 369 159 (provided ) 161 SB
1115 369 50 (by ) 52 SB
1167 369 179 (GSS-API. ) 181 SB
1348 369 111 (These ) 113 SB
1461 369 84 (hide ) 86 SB
1547 369 419 (implementation-specific ) 421 SB
1968 369 132 (internal) 132 SB
374 419 892 (representations of information from the calling code.) 892 SB
32 0 0 42 42 0 0 0 38 /Times-Italic /font31 ANSIFont font
374 519 312 (SUPPORT CALLS) 312 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 619 343 (GSS_Display_status) 343 SB
892 619 653 (translate status codes to printable form) 653 SB
374 719 361 (GSS_Indicate_mechs) 361 SB
892 719 789 (indicate mech_types supported on local system) 789 SB
374 819 364 (GSS_Compare_name) 364 SB
892 819 539 (compare two names for equality) 539 SB
374 919 339 (GSS_Display_name) 339 SB
892 919 545 (translate name to printable form) 545 SB
374 1019 325 (GSS_Import_name) 325 SB
892 1019 727 (convert printable name to normalized form) 727 SB
374 1119 338 (GSS_Release_name) 338 SB
892 1119 640 (free storage of normalized-form name) 640 SB
374 1219 412 (GSS_Release_buffer      ) 412 SB
892 1219 505 (free storage of printable name) 505 SB
374 1319 421 (GSS_Release_oid_set     ) 421 SB
892 1319 492 (free storage of OID set object) 492 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (7) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Italic
%%+ font Times-Roman
%%Page: 8 8
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
300 319 101 (6. C) 101 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
401 330 257 (ANDIDATE ) 257 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
658 319 39 (E) 39 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
697 330 359 (XTENSIONS TO ) 359 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1056 319 229 (GSS-API) 229 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 463 110 (There ) 121 SB
421 463 90 (have ) 102 SB
523 463 89 (been ) 101 SB
624 463 72 (two ) 84 SB
708 463 108 (main, ) 120 SB
828 463 65 (not ) 77 SB
905 463 224 (\(necessarily\) ) 236 SB
1141 463 160 (mutually ) 172 SB
1313 463 178 (exclusive, ) 190 SB
1503 463 174 (published ) 186 SB
1689 463 171 (proposals ) 183 SB
1872 463 59 (for ) 71 SB
1943 463 157 (GSS-API) 157 SB
300 513 189 (extensions:) 189 SB
300 613 582 (DCE-specific GSS-API extensions) 582 SB
1040 613 202 ([GSS-DCE]) 202 SB
300 713 489 (Generic GSS-API extensions) 489 SB
1040 713 162 ([RFC-19]) 162 SB
300 913 816 (The extensions proposed are summarised below.) 816 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1060 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 1063 604 (DCE-specific GSS-API extensions) 604 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1163 731 (GSSDCE_Extract_PAC_From_SecContext) 731 SB
1188 1163 78 (gets ) 89 SB
1277 1163 30 (a ) 41 SB
1318 1163 166 (reference ) 177 SB
1495 1163 43 (to ) 54 SB
1549 1163 30 (a ) 41 SB
1590 1163 95 (DCE ) 106 SB
1696 1163 92 (PAC ) 103 SB
1799 1163 92 (from ) 103 SB
1902 1163 30 (a ) 41 SB
1943 1163 157 (GSS-API) 157 SB
1188 1213 276 (security context.) 276 SB
374 1313 621 (GSSDCE_Extract_PAC_From_Cred) 621 SB
1188 1313 78 (gets ) 89 SB
1277 1313 30 (a ) 41 SB
1318 1313 166 (reference ) 177 SB
1495 1313 43 (to ) 54 SB
1549 1313 30 (a ) 41 SB
1590 1313 95 (DCE ) 106 SB
1696 1313 92 (PAC ) 103 SB
1799 1313 92 (from ) 103 SB
1902 1313 30 (a ) 41 SB
1943 1313 157 (GSS-API) 157 SB
1188 1363 308 (credentials handle) 308 SB
374 1463 584 (GSSDCE_LoginContext_To_Cred) 584 SB
1188 1463 832 (maps DCE login context to GSS-API credentials.) 832 SB
374 1563 584 (GSSDCE_Cred_To_LoginContext) 584 SB
1188 1563 848 (maps GSS-API credentials to DCE login contexts.) 848 SB
374 1663 77 (The ) 82 SB
456 1663 94 (APIs ) 99 SB
555 1663 163 (proposed ) 168 SB
723 1663 108 (above ) 113 SB
836 1663 63 (are ) 68 SB
904 1663 139 (specific ) 144 SB
1048 1663 43 (to ) 48 SB
1096 1663 63 (the ) 68 SB
1164 1663 95 (DCE ) 100 SB
1264 1663 225 (environment ) 230 SB
1494 1663 73 (and ) 79 SB
1573 1663 138 (provide ) 144 SB
1717 1663 155 (facilities ) 161 SB
1878 1663 59 (for ) 65 SB
1943 1663 157 (GSS-API) 157 SB
374 1713 1116 (applications to use DCE security interfaces \(sec_* and sec_acl_*\).) 1116 SB
374 1813 102 (Early ) 106 SB
480 1813 150 (versions ) 154 SB
634 1813 44 (of ) 48 SB
682 1813 63 (the ) 67 SB
749 1813 95 (DCE ) 99 SB
848 1813 94 (APIs ) 98 SB
946 1813 63 (are ) 67 SB
1013 1813 170 (described ) 174 SB
1187 1813 45 (in ) 49 SB
1236 1813 163 (overview ) 167 SB
1403 1813 45 (in ) 49 SB
1452 1813 213 ([GSS-DCE] ) 217 SB
1669 1813 73 (and ) 78 SB
1747 1813 76 (will ) 81 SB
1828 1813 49 (be ) 54 SB
1882 1813 174 (published ) 179 SB
2061 1813 39 (by) 39 SB
374 1863 322 (OSF in due course.) 322 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 2060 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 2063 521 (Generic GSS-API Extensions) 521 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2163 1241 (The following are the basic GSS-API extensions as outlined in [RFC-19]:) 1241 SB
374 2263 303 (gss_get_attributes) 303 SB
744 2263 119 (allows ) 128 SB
872 2263 121 (callers ) 130 SB
1002 2263 43 (to ) 52 SB
1054 2263 139 (retrieve ) 149 SB
1203 2263 168 (attributes ) 178 SB
1381 2263 182 (associated ) 192 SB
1573 2263 86 (with ) 96 SB
1669 2263 194 (credentials ) 204 SB
1873 2263 46 (or ) 56 SB
1929 2263 30 (a ) 40 SB
1969 2263 131 (security) 131 SB
744 2313 123 (context) 123 SB
374 2413 285 (gss_modify_cred) 285 SB
744 2413 138 (permits ) 145 SB
889 2413 30 (a ) 37 SB
926 2413 105 (caller ) 112 SB
1038 2413 43 (to ) 50 SB
1088 2413 131 (change ) 138 SB
1226 2413 160 (privilege ) 167 SB
1393 2413 73 (and ) 81 SB
1474 2413 130 (control ) 138 SB
1612 2413 168 (attributes ) 176 SB
1788 2413 45 (in ) 53 SB
1841 2413 52 (an ) 60 SB
1901 2413 145 (existing ) 153 SB
2054 2413 46 (set) 46 SB
744 2463 44 (of ) 49 SB
793 2463 194 (credentials ) 199 SB
992 2463 46 (or ) 52 SB
1044 2463 43 (to ) 49 SB
1093 2463 111 (create ) 117 SB
1210 2463 30 (a ) 36 SB
1246 2463 130 (variant ) 136 SB
1382 2463 57 (set ) 63 SB
1445 2463 44 (of ) 50 SB
1495 2463 205 (credentials. ) 211 SB
1706 2463 87 (This ) 93 SB
1799 2463 151 (includes ) 157 SB
1956 2463 144 (selective) 144 SB
744 2513 416 (controls over delegation.) 416 SB
374 2613 91 (Note ) 95 SB
469 2613 76 (that ) 80 SB
549 2613 30 (a ) 34 SB
583 2613 206 (SC21/WG8 ) 210 SB
793 2613 99 (input ) 104 SB
897 2613 176 (document ) 181 SB
1078 2613 136 ([GSAI] ) 141 SB
1219 2613 163 (proposed ) 168 SB
1387 2613 30 (a ) 35 SB
1422 2613 249 (generalisation ) 254 SB
1676 2613 44 (of ) 49 SB
1725 2613 63 (the ) 68 SB
1793 2613 145 (existing ) 150 SB
1943 2613 157 (GSS-API) 157 SB
374 2663 73 (and ) 77 SB
451 2663 78 (also ) 82 SB
533 2663 80 (new ) 84 SB
617 2663 233 (authorisation ) 237 SB
854 2663 185 (interfaces. ) 189 SB
1043 2663 37 (It ) 41 SB
1084 2663 175 (suggested ) 179 SB
1263 2663 130 (similar ) 134 SB
1397 2663 174 (interfaces ) 178 SB
1575 2663 59 (for ) 63 SB
1638 2663 225 (modification ) 230 SB
1868 2663 44 (of ) 49 SB
1917 2663 183 (credentials) 183 SB
374 2713 1267 (and security attribute retrieval as proposed in the above generic extensions.) 1267 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (8) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 9 9
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
374 269 192 (Additional ) 195 SB
569 269 135 (generic ) 138 SB
707 269 168 (GSS-API ) 172 SB
879 269 188 (extensions ) 192 SB
1071 269 59 (for ) 63 SB
1134 269 230 (sophisticated ) 234 SB
1368 269 142 (security ) 146 SB
1514 269 232 (requirements ) 236 SB
1750 269 172 (including ) 176 SB
1926 269 137 (support ) 141 SB
2067 269 33 (of) 33 SB
374 319 167 ("delegate ) 173 SB
547 319 222 (credentials", ) 228 SB
775 319 73 (and ) 79 SB
854 319 98 (other ) 104 SB
958 319 152 (multiple ) 158 SB
1116 319 178 (credential ) 184 SB
1300 319 129 (servers ) 135 SB
1435 319 63 (are ) 69 SB
1504 319 78 (also ) 84 SB
1588 319 136 (defined ) 142 SB
1730 319 73 (and ) 79 SB
1809 319 170 (described ) 177 SB
1986 319 45 (in ) 52 SB
2038 319 62 (this) 62 SB
374 369 106 (paper:) 106 SB
374 469 350 (gss_set_default_cred) 350 SB
892 469 888 (specifies alternative default credentials to the default) 888 SB
374 569 394 (gss_get_delegate_creds) 394 SB
892 569 155 (retrieves ) 160 SB
1052 569 150 (delegate ) 155 SB
1207 569 194 (credentials ) 199 SB
1406 569 182 (associated ) 187 SB
1593 569 86 (with ) 91 SB
1684 569 194 (credentials ) 199 SB
1883 569 46 (or ) 51 SB
1934 569 30 (a ) 35 SB
1969 569 131 (security) 131 SB
892 619 123 (context) 123 SB
374 719 343 (gss_compound_cred) 343 SB
892 719 1157 (links two credentials to produce one which is a compound of the two) 1157 SB
374 919 77 (The ) 81 SB
455 919 135 (generic ) 139 SB
594 919 188 (extensions ) 193 SB
787 919 149 (outlined ) 154 SB
941 919 108 (above ) 113 SB
1054 919 63 (are ) 68 SB
1122 919 144 (detailed ) 149 SB
1271 919 45 (in ) 50 SB
1321 919 177 (Appendix ) 182 SB
1503 919 39 (C ) 44 SB
1547 919 44 (of ) 49 SB
1596 919 73 (this ) 78 SB
1674 919 116 (paper, ) 121 SB
1795 919 73 (and ) 78 SB
1873 919 63 (are ) 68 SB
1941 919 159 (discussed) 159 SB
374 969 448 (further in the next section.) 448 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1891 3069 92 (Page ) 92 SB
1983 3069 21 (9) 21 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Times-Roman
%%Page: 10 10
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
300 319 104 (7. O) 104 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
404 330 422 (VERVIEW OF THE ) 422 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
826 319 39 (E) 39 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
865 330 238 (XTENDED ) 238 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1103 319 229 (GSS-API) 229 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 463 87 (This ) 93 SB
393 463 129 (section ) 135 SB
528 463 120 (briefly ) 126 SB
654 463 210 (summarises ) 216 SB
870 463 63 (the ) 69 SB
939 463 97 (main ) 103 SB
1042 463 143 (features ) 149 SB
1191 463 44 (of ) 50 SB
1241 463 63 (the ) 70 SB
1311 463 96 (basic ) 103 SB
1414 463 314 (gss_get_attributes ) 321 SB
1735 463 73 (and ) 80 SB
1815 463 285 (gss_modify_cred) 285 SB
300 513 898 (APIs \(full details of which are given in Appendix C\).) 898 SB
300 613 681 (It then walks through how the extended ) 682 SB
982 613 168 (GSS-API ) 169 SB
1151 613 46 (as ) 47 SB
1198 613 30 (a ) 31 SB
1229 613 112 (whole ) 113 SB
1342 613 39 (is ) 40 SB
1382 613 87 (used ) 88 SB
1470 613 59 (for ) 60 SB
1530 613 77 (\(the ) 78 SB
1608 613 137 (slightly ) 138 SB
1746 613 97 (more ) 98 SB
1844 613 168 (complex\) ) 169 SB
2013 613 87 (cases) 87 SB
300 663 230 (of delegation.) 230 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 760 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 763 323 (gss_get_attributes) 323 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 864 63 (An ) 64 SB
438 864 81 (user ) 82 SB
520 864 44 (of ) 45 SB
565 864 63 (the ) 64 SB
629 864 170 (Extended ) 171 SB
800 864 168 (GSS-API ) 169 SB
969 864 70 (can ) 71 SB
1040 864 66 (use ) 67 SB
1107 864 63 (the ) 64 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
1171 863 323 (gss_get_attributes) 323 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
1494 864 11 ( ) 12 SB
1506 864 78 (API ) 79 SB
1585 864 43 (to ) 44 SB
1629 864 130 (inspect ) 132 SB
1761 864 142 (security ) 144 SB
1905 864 168 (attributes ) 170 SB
2075 864 25 (if) 25 SB
374 914 644 (the mechanism makes these available.) 644 SB
374 1014 87 (This ) 89 SB
463 1014 78 (API ) 80 SB
543 1014 70 (can ) 72 SB
615 1014 49 (be ) 51 SB
666 1014 87 (used ) 89 SB
755 1014 50 (by ) 52 SB
807 1014 167 (initiating ) 169 SB
976 1014 132 (clients, ) 134 SB
1110 1014 177 (delegates, ) 179 SB
1289 1014 73 (and ) 75 SB
1364 1014 129 (servers ) 131 SB
1495 1014 43 (to ) 46 SB
1541 1014 105 (query ) 108 SB
1649 1014 168 (attributes ) 171 SB
1820 1014 45 (in ) 48 SB
1868 1014 194 (credentials ) 197 SB
2065 1014 35 (or) 35 SB
374 1064 292 (security contexts.) 292 SB
374 1164 823 (Security attributes which can be queried include:) 823 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 1260 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 1264 171 (identifiers) 171 SB
744 1264 421 (such as the audit identity) 421 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 1360 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 1364 165 (privileges) 165 SB
744 1364 88 (such ) 90 SB
834 1364 46 (as ) 48 SB
882 1364 116 (access ) 118 SB
1000 1364 150 (identity, ) 152 SB
1152 1364 109 (group ) 111 SB
1263 1364 73 (and ) 75 SB
1338 1364 76 (role ) 78 SB
1416 1364 128 (\(which ) 130 SB
1546 1364 82 (may ) 84 SB
1630 1364 49 (be ) 51 SB
1681 1364 46 (as ) 48 SB
1729 1364 150 (delegate ) 152 SB
1881 1364 120 (and/or ) 123 SB
2004 1364 96 (direct) 96 SB
744 1414 154 (accessor\)) 154 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 1510 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 1514 135 (controls) 135 SB
744 1514 1032 (time limitations, legitimate target, and delegation constraints) 1032 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 1610 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 1614 188 (restrictions) 188 SB
744 1614 939 (optional or required application-specific access controls) 939 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 1710 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 1714 1648 (user-defined attributes which may qualify other attributes, or be used in peer-to-peer negotiations.) 1648 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1861 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 1864 299 (gss_modify_cred) 299 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1965 41 (A ) 48 SB
422 1965 81 (user ) 88 SB
510 1965 44 (of ) 51 SB
561 1965 63 (the ) 70 SB
631 1965 170 (Extended ) 177 SB
808 1965 168 (GSS-API ) 175 SB
983 1965 70 (can ) 77 SB
1060 1965 66 (use ) 73 SB
1133 1965 63 (the ) 70 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
1203 1964 299 (gss_modify_cred) 299 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
1502 1965 11 ( ) 18 SB
1520 1965 78 (API ) 85 SB
1605 1965 43 (to ) 50 SB
1655 1965 132 (request ) 139 SB
1794 1965 142 (security ) 149 SB
1943 1965 157 (attributes) 157 SB
374 2015 1327 (\(such as discussed above for gss_get_attributes\) if the mechanism permits this.) 1327 SB
374 2115 87 (This ) 91 SB
465 2115 78 (API ) 82 SB
547 2115 136 (enables ) 140 SB
687 2115 63 (the ) 67 SB
754 2115 256 (security-aware ) 261 SB
1015 2115 81 (user ) 86 SB
1101 2115 43 (to ) 48 SB
1149 2115 111 (create ) 116 SB
1265 2115 73 (and ) 78 SB
1343 2115 85 (then ) 90 SB
1433 2115 228 (cumulatively ) 233 SB
1666 2115 155 (annotate ) 160 SB
1826 2115 194 (credentials ) 199 SB
2025 2115 75 (with) 75 SB
374 2165 148 (requests ) 158 SB
532 2165 59 (for ) 69 SB
601 2165 175 (particular ) 185 SB
786 2165 116 (access ) 126 SB
912 2165 120 (rights, ) 130 SB
1042 2165 73 (and ) 83 SB
1125 2165 195 (constraints ) 205 SB
1330 2165 53 (on ) 63 SB
1393 2165 82 (how ) 92 SB
1485 2165 97 (these ) 107 SB
1592 2165 116 (access ) 126 SB
1718 2165 109 (rights ) 120 SB
1838 2165 63 (are ) 74 SB
1912 2165 188 (propogated) 188 SB
374 2215 355 (through the network.) 355 SB
374 2365 37 (It ) 44 SB
418 2365 39 (is ) 46 SB
464 2365 65 (not ) 72 SB
536 2365 160 (specified ) 167 SB
703 2365 42 (at ) 49 SB
752 2365 63 (the ) 70 SB
822 2365 78 (API ) 85 SB
907 2365 147 (whether ) 154 SB
1061 2365 88 (calls ) 95 SB
1156 2365 43 (to ) 50 SB
1206 2365 296 (gss_modify_cred ) 303 SB
1509 2365 105 (result ) 112 SB
1621 2365 45 (in ) 52 SB
1673 2365 88 (calls ) 95 SB
1768 2365 43 (to ) 50 SB
1818 2365 142 (security ) 149 SB
1967 2365 133 (services) 133 SB
374 2415 152 (required ) 171 SB
545 2415 50 (by ) 69 SB
614 2415 175 (particular ) 194 SB
808 2415 231 (mechanisms. ) 250 SB
1058 2415 77 (The ) 96 SB
1154 2415 84 (only ) 103 SB
1257 2415 216 (requirement ) 235 SB
1492 2415 39 (is ) 58 SB
1550 2415 76 (that ) 96 SB
1646 2415 71 (any ) 91 SB
1737 2415 176 (annotated ) 196 SB
1933 2415 167 (credential) 167 SB
374 2465 1276 (requirements are applied when a gss_init_sec_context operation is invoked.) 1276 SB
374 2565 171 (However, ) 176 SB
550 2565 59 (for ) 64 SB
614 2565 149 (optional ) 154 SB
768 2565 81 (user ) 86 SB
854 2565 130 (control ) 135 SB
989 2565 84 (over ) 89 SB
1078 2565 102 (when ) 107 SB
1185 2565 194 (credentials ) 199 SB
1384 2565 82 (may ) 88 SB
1472 2565 49 (be ) 55 SB
1527 2565 161 (modified ) 167 SB
1694 2565 50 (by ) 56 SB
1750 2565 169 (processes ) 175 SB
1925 2565 46 (or ) 52 SB
1977 2565 123 (threads) 123 SB
374 2615 114 (which ) 116 SB
490 2615 124 (inherit ) 126 SB
616 2615 46 (or ) 48 SB
664 2615 90 (have ) 92 SB
756 2615 116 (access ) 118 SB
874 2615 43 (to ) 45 SB
919 2615 97 (these ) 99 SB
1018 2615 205 (credentials, ) 207 SB
1225 2615 63 (the ) 65 SB
1290 2615 307 (commit_cred_req ) 309 SB
1599 2615 142 (boolean ) 145 SB
1744 2615 118 (option ) 121 SB
1865 2615 39 (is ) 42 SB
1907 2615 159 (provided ) 162 SB
2069 2615 31 (at) 31 SB
374 2665 63 (the ) 67 SB
441 2665 89 (API. ) 93 SB
534 2665 57 (By ) 61 SB
595 2665 162 (asserting ) 167 SB
762 2665 73 (this ) 78 SB
840 2665 129 (option, ) 134 SB
974 2665 63 (the ) 68 SB
1042 2665 78 (API ) 83 SB
1125 2665 81 (user ) 86 SB
1211 2665 153 (prevents ) 158 SB
1369 2665 127 (further ) 132 SB
1501 2665 191 (annotation ) 196 SB
1697 2665 44 (of ) 49 SB
1746 2665 63 (the ) 68 SB
1814 2665 205 (credentials. ) 210 SB
2024 2665 76 (This) 76 SB
374 2715 76 (will ) 119 SB
493 2715 103 (cause ) 147 SB
640 2715 121 (failure ) 165 SB
805 2715 44 (of ) 88 SB
893 2715 196 (subsequent ) 240 SB
1133 2715 296 (gss_modify_cred ) 340 SB
1473 2715 170 (operation ) 214 SB
1687 2715 114 (which ) 158 SB
1845 2715 94 (don't ) 138 SB
1983 2715 117 (specify) 117 SB
374 2765 1238 (duplicate_cred_req==TRUE. Hence the credentials are effectively frozen.) 1238 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (10) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 11 11
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
374 269 77 (The ) 84 SB
458 269 389 (gss_target_control_set ) 396 SB
854 269 159 (structure ) 166 SB
1020 269 122 (passed ) 129 SB
1149 269 43 (to ) 50 SB
1199 269 296 (gss_modify_cred ) 304 SB
1503 269 39 (is ) 47 SB
1550 269 30 (a ) 38 SB
1588 269 187 (compound ) 195 SB
1783 269 159 (structure ) 167 SB
1950 269 114 (which ) 122 SB
2072 269 28 (is) 28 SB
374 319 87 (used ) 93 SB
467 319 43 (to ) 50 SB
517 319 149 (describe ) 156 SB
673 319 114 (which ) 121 SB
794 319 195 (constraints ) 202 SB
996 319 53 (on ) 60 SB
1056 319 63 (the ) 70 SB
1126 319 66 (use ) 73 SB
1199 319 44 (of ) 51 SB
1250 319 116 (access ) 123 SB
1373 319 109 (rights ) 116 SB
1489 319 103 (apply ) 110 SB
1599 319 43 (to ) 50 SB
1649 319 114 (which ) 121 SB
1770 319 135 (targets. ) 142 SB
1912 319 37 (It ) 44 SB
1956 319 144 (specifies) 144 SB
374 369 147 (whether ) 151 SB
525 369 116 (access ) 120 SB
645 369 109 (rights ) 113 SB
758 369 70 (can ) 74 SB
832 369 49 (be ) 53 SB
885 369 182 (forwarded ) 187 SB
1072 369 43 (to ) 48 SB
1120 369 127 (certain ) 132 SB
1252 369 135 (targets, ) 140 SB
1392 369 147 (whether ) 152 SB
1544 369 82 (they ) 87 SB
1631 369 70 (can ) 75 SB
1706 369 49 (be ) 54 SB
1760 369 171 (delegated ) 176 SB
1936 369 43 (to ) 48 SB
1984 369 116 (certain) 116 SB
374 419 135 (targets, ) 138 SB
512 419 73 (and ) 76 SB
588 419 63 (the ) 66 SB
654 419 86 (time ) 89 SB
743 419 118 (period ) 121 SB
864 419 59 (for ) 62 SB
926 419 114 (which ) 117 SB
1043 419 63 (the ) 66 SB
1109 419 116 (access ) 119 SB
1228 419 109 (rights ) 113 SB
1341 419 63 (are ) 67 SB
1408 419 106 (valid. ) 110 SB
1518 419 69 (For ) 73 SB
1591 419 88 (each ) 92 SB
1683 419 109 (group ) 113 SB
1796 419 44 (of ) 48 SB
1844 419 124 (targets ) 128 SB
1972 419 30 (a ) 34 SB
2006 419 57 (set ) 61 SB
2067 419 33 (of) 33 SB
374 469 186 (delegation ) 200 SB
574 469 134 (options ) 148 SB
722 469 39 (is ) 53 SB
775 469 162 (available ) 176 SB
951 469 50 (by ) 64 SB
1015 469 124 (setting ) 138 SB
1153 469 30 (a ) 44 SB
1197 469 288 (delegation_flags ) 303 SB
1500 469 87 (field ) 102 SB
1602 469 114 (which ) 129 SB
1731 469 151 (includes ) 166 SB
1897 469 140 (settings ) 155 SB
2052 469 48 (for) 48 SB
374 519 1051 (forbidding delegation, simple delegation, or traced delegation.) 1051 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 666 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 669 325 (Simple Delegation) 325 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 769 1268 (A distributed application can consist of many clients servicing users, some ) 1269 SB
1643 769 223 (intermediate ) 224 SB
1867 769 129 (servers ) 130 SB
1997 769 103 (which) 103 SB
374 819 146 (perform ) 149 SB
523 819 30 (a ) 33 SB
556 819 134 (routing ) 137 SB
693 819 46 (or ) 49 SB
742 819 94 (relay ) 97 SB
839 819 162 (function, ) 165 SB
1004 819 73 (and ) 76 SB
1080 819 30 (a ) 33 SB
1113 819 140 (number ) 143 SB
1256 819 44 (of ) 47 SB
1303 819 142 ("target" ) 145 SB
1448 819 129 (servers ) 133 SB
1581 819 114 (which ) 118 SB
1699 819 116 (access ) 120 SB
1819 819 168 (resources ) 172 SB
1991 819 53 (on ) 57 SB
2048 819 52 (the) 52 SB
374 869 419 (application users' behalf.) 419 SB
374 969 95 (Such ) 101 SB
475 969 52 (an ) 58 SB
533 969 199 (application ) 205 SB
738 969 76 (will ) 82 SB
820 969 131 (require ) 137 SB
957 969 123 (simple ) 129 SB
1086 969 186 (delegation ) 192 SB
1278 969 36 (if ) 42 SB
1320 969 35 (it ) 41 SB
1361 969 39 (is ) 45 SB
1406 969 152 (required ) 158 SB
1564 969 59 (for ) 65 SB
1629 969 88 (each ) 94 SB
1723 969 108 (target ) 114 SB
1837 969 43 (to ) 49 SB
1886 969 102 (make ) 109 SB
1995 969 105 (access) 105 SB
374 1019 130 (control ) 140 SB
514 1019 166 (decisions ) 176 SB
690 1019 105 (based ) 115 SB
805 1019 84 (only ) 94 SB
899 1019 53 (on ) 63 SB
962 1019 63 (the ) 73 SB
1035 1019 167 (initiating ) 177 SB
1212 1019 105 (user's ) 115 SB
1327 1019 160 (privilege ) 170 SB
1497 1019 179 (attributes, ) 189 SB
1686 1019 73 (and ) 84 SB
1770 1019 82 (thus ) 93 SB
1863 1019 63 (the ) 74 SB
1937 1019 163 (delegate's) 163 SB
374 1069 160 (privilege ) 163 SB
537 1069 168 (attributes ) 171 SB
708 1069 63 (are ) 66 SB
774 1069 44 (of ) 47 SB
821 1069 53 (no ) 56 SB
877 1069 147 (interest. ) 150 SB
1027 1069 130 (Simple ) 133 SB
1160 1069 186 (delegation ) 189 SB
1349 1069 39 (is ) 42 SB
1391 1069 78 (also ) 81 SB
1472 1069 152 (required ) 155 SB
1627 1069 36 (if ) 40 SB
1667 1069 88 (such ) 92 SB
1759 1069 124 (targets ) 128 SB
1887 1069 93 (must ) 97 SB
1984 1069 116 (further) 116 SB
374 1119 1712 (delegate the user's access rights among a group of servers in order to achieve the required processing.) 1712 SB
374 1219 38 (If ) 39 SB
413 1219 30 (a ) 31 SB
444 1219 81 (user ) 82 SB
526 1219 44 (of ) 45 SB
571 1219 73 (this ) 74 SB
645 1219 191 (distributed ) 192 SB
837 1219 199 (application ) 200 SB
1037 1219 147 (requires ) 149 SB
1186 1219 43 (to ) 45 SB
1231 1219 150 (delegate ) 152 SB
1383 1219 51 (its ) 53 SB
1436 1219 116 (access ) 118 SB
1554 1219 109 (rights ) 111 SB
1665 1219 71 (just ) 73 SB
1738 1219 43 (to ) 45 SB
1783 1219 30 (a ) 32 SB
1815 1219 139 (specific ) 141 SB
1956 1219 109 (group ) 111 SB
2067 1219 33 (of) 33 SB
374 1269 124 (targets ) 143 SB
517 1269 73 (\(for ) 92 SB
609 1269 153 (example ) 172 SB
781 1269 30 (a ) 49 SB
830 1269 139 (specific ) 158 SB
988 1269 227 (intermediary ) 246 SB
1234 1269 73 (and ) 92 SB
1326 1269 30 (a ) 49 SB
1375 1269 109 (group ) 128 SB
1503 1269 44 (of ) 63 SB
1566 1269 149 (targets\), ) 168 SB
1734 1269 85 (then ) 105 SB
1839 1269 63 (the ) 83 SB
1922 1269 81 (user ) 101 SB
2023 1269 77 (calls) 77 SB
374 1319 296 (gss_modify_cred ) 299 SB
673 1319 43 (to ) 46 SB
719 1319 111 (create ) 114 SB
833 1319 30 (a ) 33 SB
866 1319 80 (new ) 84 SB
950 1319 57 (set ) 61 SB
1011 1319 44 (of ) 48 SB
1059 1319 194 (credentials ) 198 SB
1257 1319 183 (specifying ) 187 SB
1444 1319 11 ( ) 15 SB
1459 1319 45 (in ) 49 SB
1508 1319 63 (the ) 67 SB
1575 1319 389 (gss_target_control_set ) 393 SB
1968 1319 76 (that ) 80 SB
2048 1319 52 (the) 52 SB
374 1369 1231 (delegation_flags for these targets is set to "can_be_delegate_and_target".) 1231 SB
374 1469 99 (After ) 118 SB
492 1469 63 (the ) 82 SB
574 1469 132 (normal ) 151 SB
725 1469 927 (gss_init_security_context/gss_accept_security_context ) 946 SB
1671 1469 186 (operations ) 205 SB
1876 1469 170 (described ) 190 SB
2066 1469 34 (in) 34 SB
374 1519 129 (section ) 151 SB
525 1519 43 (5, ) 65 SB
590 1519 63 (the ) 85 SB
675 1519 223 (intermediate ) 246 SB
921 1519 113 (server ) 136 SB
1057 1519 168 (possesses ) 191 SB
1248 1519 30 (a ) 53 SB
1301 1519 57 (set ) 80 SB
1381 1519 44 (of ) 67 SB
1448 1519 171 (delegated ) 194 SB
1642 1519 194 (credentials ) 217 SB
1859 1519 137 (emitted ) 160 SB
2019 1519 81 (from) 81 SB
374 1569 1011 (gss_accept_security_context \(the "delegated_cred_handle"\).) 1011 SB
374 1669 111 (These ) 115 SB
489 1669 171 (delegated ) 175 SB
664 1669 194 (credentials ) 198 SB
862 1669 70 (can ) 74 SB
936 1669 49 (be ) 53 SB
989 1669 87 (used ) 92 SB
1081 1669 45 (in ) 50 SB
1131 1669 63 (the ) 68 SB
1199 1669 132 (normal ) 137 SB
1336 1669 78 (way ) 83 SB
1419 1669 43 (to ) 48 SB
1467 1669 130 (initiate ) 135 SB
1602 1669 127 (further ) 132 SB
1734 1669 142 (security ) 147 SB
1881 1669 161 (contexts, ) 166 SB
2047 1669 53 (but) 53 SB
374 1719 88 (such ) 89 SB
463 1719 154 (attempts ) 155 SB
618 1719 76 (will ) 77 SB
695 1719 84 (only ) 85 SB
780 1719 141 (succeed ) 142 SB
922 1719 59 (for ) 60 SB
982 1719 124 (targets ) 125 SB
1107 1719 156 (included ) 158 SB
1265 1719 45 (in ) 47 SB
1312 1719 63 (the ) 65 SB
1377 1719 109 (group ) 111 SB
1488 1719 175 (originally ) 177 SB
1665 1719 160 (specified ) 162 SB
1827 1719 50 (by ) 52 SB
1879 1719 63 (the ) 65 SB
1944 1719 156 (initiating) 156 SB
374 1769 81 (user.) 81 SB
374 1869 77 (The ) 79 SB
453 1869 204 (mechanism ) 206 SB
659 1869 76 (will ) 78 SB
737 1869 167 (constrain ) 169 SB
906 1869 147 (whether ) 149 SB
1055 1869 296 (gss_modify_cred ) 298 SB
1353 1869 70 (can ) 72 SB
1425 1869 49 (be ) 51 SB
1476 1869 87 (used ) 89 SB
1565 1869 50 (by ) 52 SB
1617 1869 63 (the ) 66 SB
1683 1869 223 (intermediate ) 226 SB
1909 1869 113 (server ) 116 SB
2025 1869 75 (with) 75 SB
374 1919 171 (delegated ) 182 SB
556 1919 205 (credentials, ) 216 SB
772 1919 64 (but ) 75 SB
847 1919 98 (some ) 109 SB
956 1919 220 (mechanisms ) 231 SB
1187 1919 76 (will ) 88 SB
1275 1919 122 (permit ) 134 SB
1409 1919 63 (the ) 75 SB
1484 1919 223 (intermediate ) 235 SB
1719 1919 113 (server ) 125 SB
1844 1919 43 (to ) 55 SB
1899 1919 122 (reduce ) 134 SB
2033 1919 67 (\(but) 67 SB
374 1969 1212 (normally not increase\) the ability to delegate an initiator's access rights.) 1212 SB
374 2069 112 (When ) 121 SB
495 2069 87 (used ) 96 SB
591 2069 45 (in ) 54 SB
645 2069 209 (conjunction ) 218 SB
863 2069 86 (with ) 95 SB
958 2069 95 (DCE ) 104 SB
1062 2069 89 (RPC ) 98 SB
1160 2069 185 (interfaces, ) 194 SB
1354 2069 63 (the ) 72 SB
1426 2069 213 ([GSS-DCE] ) 223 SB
1649 2069 174 (interfaces ) 184 SB
1833 2069 63 (are ) 73 SB
1906 2069 152 (required ) 162 SB
2068 2069 32 (to) 32 SB
374 2119 136 (convert ) 137 SB
511 2119 148 (between ) 149 SB
660 2119 95 (DCE ) 96 SB
756 2119 98 (login ) 99 SB
855 2119 150 (contexts ) 151 SB
1006 2119 73 (and ) 74 SB
1080 2119 168 (GSS-API ) 169 SB
1249 2119 205 (credentials. ) 207 SB
1456 2119 69 (For ) 71 SB
1527 2119 164 (example, ) 166 SB
1693 2119 36 (if ) 38 SB
1731 2119 52 (an ) 54 SB
1785 2119 89 (RPC ) 91 SB
1876 2119 105 (client ) 107 SB
1983 2119 39 (is ) 41 SB
2024 2119 76 (used) 76 SB
374 2169 43 (to ) 48 SB
422 2169 116 (access ) 121 SB
543 2169 30 (a ) 35 SB
578 2169 167 (non-RPC ) 172 SB
750 2169 108 (target ) 113 SB
863 2169 62 (via ) 67 SB
930 2169 30 (a ) 35 SB
965 2169 182 ("gateway" ) 187 SB
1152 2169 223 (intermediate ) 228 SB
1380 2169 124 (server, ) 129 SB
1509 2169 85 (then ) 90 SB
1599 2169 63 (the ) 68 SB
1667 2169 176 (annotated ) 181 SB
1848 2169 194 (credentials ) 200 SB
2048 2169 52 (are) 52 SB
374 2219 1503 (converted to DCE login contexts via GSSDCE_Cred_To_Login_Context, then the client ) 1504 SB
1878 2219 98 (login ) 99 SB
1977 2219 123 (context) 123 SB
374 2269 39 (is ) 49 SB
423 2269 57 (set ) 67 SB
490 2269 62 (via ) 72 SB
562 2269 477 (rpc_set_binding_auth_info. ) 487 SB
1049 2269 53 (At ) 63 SB
1112 2269 63 (the ) 73 SB
1185 2269 124 (server, ) 134 SB
1319 2269 63 (the ) 73 SB
1392 2269 351 (rpc_inq_auth_client ) 361 SB
1753 2269 158 (interface ) 168 SB
1921 2269 39 (is ) 49 SB
1970 2269 87 (used ) 98 SB
2068 2269 32 (to) 32 SB
374 2319 139 (retrieve ) 145 SB
519 2319 30 (a ) 37 SB
556 2319 98 (login ) 105 SB
661 2319 134 (context ) 141 SB
802 2319 114 (which ) 121 SB
923 2319 39 (is ) 46 SB
969 2319 175 (converted ) 182 SB
1151 2319 62 (via ) 69 SB
1220 2319 595 (GSSDCE_LoginContext_To_Cred ) 602 SB
1822 2319 77 (into ) 84 SB
1906 2319 30 (a ) 37 SB
1943 2319 157 (GSS-API) 157 SB
374 2369 178 (credential.) 178 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 2466 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 2469 331 (Traced Delegation) 331 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2569 38 (If ) 41 SB
415 2569 63 (the ) 66 SB
481 2569 124 (targets ) 127 SB
608 2569 44 (of ) 47 SB
655 2569 30 (a ) 33 SB
688 2569 191 (distributed ) 194 SB
882 2569 199 (application ) 203 SB
1085 2569 90 (need ) 94 SB
1179 2569 43 (to ) 47 SB
1226 2569 126 (inform ) 130 SB
1356 2569 90 (their ) 94 SB
1450 2569 116 (access ) 120 SB
1570 2569 130 (control ) 134 SB
1704 2569 166 (decisions ) 170 SB
1874 2569 50 (by ) 54 SB
1928 2569 63 (the ) 67 SB
1995 2569 105 (access) 105 SB
374 2619 109 (rights ) 115 SB
489 2619 46 (or ) 52 SB
541 2619 98 (other ) 104 SB
645 2619 142 (security ) 148 SB
793 2619 168 (attributes ) 174 SB
967 2619 44 (of ) 50 SB
1017 2619 63 (the ) 69 SB
1086 2619 187 (delegating ) 193 SB
1279 2619 223 (intermediate ) 229 SB
1508 2619 129 (servers ) 135 SB
1643 2619 45 (in ) 51 SB
1694 2619 150 (addition ) 156 SB
1850 2619 43 (to ) 49 SB
1899 2619 63 (the ) 70 SB
1969 2619 131 (security) 131 SB
374 2669 1148 (attributes of the initiating user, then traced delegation must be used.) 1148 SB
374 2769 746 (An example of such a requirement could be ) 747 SB
1121 2769 36 (if ) 37 SB
1158 2769 175 (particular ) 176 SB
1334 2769 186 (delegation ) 187 SB
1521 2769 147 ("routes" ) 148 SB
1669 2769 63 (are ) 64 SB
1733 2769 201 (specifically ) 202 SB
1935 2769 165 (mandated) 165 SB
374 2819 441 (or, conversely, prohibited.) 441 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (11) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 12 12
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
374 269 123 (Where ) 132 SB
506 269 114 (traced ) 123 SB
629 269 186 (delegation ) 195 SB
824 269 39 (is ) 48 SB
872 269 163 (required, ) 172 SB
1044 269 63 (the ) 72 SB
1116 269 322 ("delegation_flags" ) 331 SB
1447 269 160 (specified ) 170 SB
1617 269 50 (by ) 60 SB
1677 269 63 (the ) 73 SB
1750 269 167 (initiating ) 177 SB
1927 269 81 (user ) 91 SB
2018 269 82 (must) 82 SB
374 319 424 (include "trace_required".) 424 SB
374 419 1517 (The initiating user, and each subsequent delegate specifies the next link in the delegation ) 1518 SB
1892 419 104 (chain ) 105 SB
1997 419 50 (by ) 51 SB
2048 419 52 (the) 52 SB
374 469 673 (target specified in gss_init_sec_context.) 673 SB
374 619 112 (When ) 114 SB
488 619 63 (the ) 65 SB
553 619 223 (intermediate ) 226 SB
779 619 113 (server ) 116 SB
895 619 132 (obtains ) 135 SB
1030 619 63 (the ) 66 SB
1096 619 171 (delegated ) 174 SB
1270 619 194 (credentials ) 197 SB
1467 619 161 (\(whether ) 164 SB
1631 619 62 (via ) 65 SB
1696 619 89 (RPC ) 92 SB
1788 619 46 (or ) 49 SB
1837 619 90 (not\), ) 93 SB
1930 619 35 (it ) 38 SB
1968 619 68 (has ) 71 SB
2039 619 61 (two) 61 SB
374 669 135 (options:) 135 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 765 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 769 47 (In ) 50 SB
499 769 63 (the ) 66 SB
565 769 79 (first ) 83 SB
648 769 166 (\(simpler\) ) 170 SB
818 769 93 (case, ) 97 SB
915 769 63 (the ) 67 SB
982 769 142 (security ) 146 SB
1128 769 168 (attributes ) 172 SB
1300 769 44 (of ) 48 SB
1348 769 63 (the ) 67 SB
1415 769 223 (intermediate ) 227 SB
1642 769 113 (server ) 117 SB
1759 769 63 (are ) 67 SB
1826 769 63 (the ) 67 SB
1893 769 97 (same ) 101 SB
1994 769 59 (for ) 63 SB
2057 769 43 (all) 43 SB
449 819 135 (targets, ) 140 SB
589 819 85 (then ) 90 SB
679 819 71 (any ) 76 SB
755 819 142 (security ) 147 SB
902 819 150 (contexts ) 155 SB
1057 819 151 (initiated ) 156 SB
1213 819 50 (by ) 55 SB
1268 819 63 (the ) 69 SB
1337 819 223 (intermediate ) 229 SB
1566 819 113 (server ) 119 SB
1685 819 76 (will ) 82 SB
1767 819 154 (combine ) 160 SB
1927 819 51 (its ) 57 SB
1984 819 116 (default) 116 SB
449 869 184 ("delegate" ) 185 SB
634 869 194 (credentials ) 195 SB
829 869 86 (with ) 87 SB
916 869 63 (the ) 65 SB
981 869 167 (initiating ) 169 SB
1150 869 105 (user's ) 107 SB
1257 869 194 (credentials ) 196 SB
1453 869 102 (when ) 104 SB
1557 869 97 (these ) 99 SB
1656 869 105 (user's ) 107 SB
1763 869 194 (credentials ) 196 SB
1959 869 63 (are ) 65 SB
2024 869 76 (used) 76 SB
449 919 46 (as ) 56 SB
505 919 52 (an ) 62 SB
567 919 172 (argument ) 182 SB
749 919 43 (to ) 53 SB
802 919 371 (gss_init_sec_context. ) 382 SB
1184 919 87 (This ) 98 SB
1282 919 148 (obviates ) 159 SB
1441 919 63 (the ) 74 SB
1515 919 90 (need ) 101 SB
1616 919 59 (for ) 70 SB
1686 919 30 (a ) 41 SB
1727 919 149 (separate ) 160 SB
1887 919 170 (operation ) 181 SB
2068 919 32 (to) 32 SB
449 969 1306 (compound the user's credentials with the server's default delegate credentials.) 1306 SB
449 1069 77 (The ) 90 SB
539 1069 199 (application ) 212 SB
751 1069 108 (target ) 121 SB
872 1069 113 (server ) 126 SB
998 1069 76 (will ) 89 SB
1087 1069 49 (be ) 62 SB
1149 1069 80 (able ) 93 SB
1242 1069 43 (to ) 56 SB
1298 1069 139 (retrieve ) 153 SB
1451 1069 71 (any ) 85 SB
1536 1069 184 ("delegate" ) 198 SB
1734 1069 194 (credentials ) 208 SB
1942 1069 92 (from ) 106 SB
2048 1069 52 (the) 52 SB
449 1119 194 (credentials ) 197 SB
646 1119 137 (emitted ) 141 SB
787 1119 50 (by ) 54 SB
841 1119 487 (gss_accept_security_context ) 491 SB
1332 1119 77 (\(i.e. ) 81 SB
1413 1119 63 (the ) 67 SB
1480 1119 447 ("delegated_cred_handle"\) ) 451 SB
1931 1119 62 (via ) 66 SB
1997 1119 66 (use ) 70 SB
2067 1119 33 (of) 33 SB
449 1169 416 (gss_get_delegate_creds. ) 438 SB
887 1169 96 (Each ) 118 SB
1005 1169 88 (such ) 110 SB
1115 1169 202 (credentials' ) 224 SB
1339 1169 142 (security ) 164 SB
1503 1169 168 (attributes ) 190 SB
1693 1169 70 (can ) 92 SB
1785 1169 49 (be ) 72 SB
1857 1169 169 (inspected ) 192 SB
2049 1169 51 (via) 51 SB
449 1219 314 (gss_get_attributes.) 314 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 1365 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 1369 243 (Alternatively, ) 244 SB
693 1369 63 (the ) 64 SB
757 1369 142 (security ) 143 SB
900 1369 168 (attributes ) 169 SB
1069 1369 44 (of ) 45 SB
1114 1369 63 (the ) 64 SB
1178 1369 223 (intermediate ) 224 SB
1402 1369 113 (server ) 114 SB
1516 1369 82 (may ) 83 SB
1599 1369 49 (be ) 50 SB
1649 1369 152 (required ) 153 SB
1802 1369 43 (to ) 44 SB
1846 1369 49 (be ) 50 SB
1896 1369 155 (different ) 156 SB
2052 1369 48 (for) 48 SB
449 1419 1336 (different target groups \(as some groups may be more more trusted than others\).) 1336 SB
449 1519 95 (Such ) 105 SB
554 1519 155 (different ) 165 SB
719 1519 113 (server ) 123 SB
842 1519 150 (delegate ) 160 SB
1002 1519 194 (credentials ) 204 SB
1206 1519 63 (are ) 73 SB
1279 1519 171 (requested ) 181 SB
1460 1519 50 (by ) 60 SB
1520 1519 158 (applying ) 168 SB
1688 1519 296 (gss_modify_cred ) 306 SB
1994 1519 43 (to ) 54 SB
2048 1519 52 (the) 52 SB
449 1569 137 (server's ) 140 SB
589 1569 194 (credentials ) 197 SB
786 1569 45 (in ) 48 SB
834 1569 63 (the ) 66 SB
900 1569 132 (normal ) 135 SB
1035 1569 89 (way, ) 92 SB
1127 1569 64 (but ) 67 SB
1194 1569 50 (by ) 53 SB
1247 1569 183 (specifying ) 187 SB
1434 1569 233 ("is_delegate" ) 237 SB
1671 1569 112 (rather ) 116 SB
1787 1569 86 (than ) 90 SB
1877 1569 223 ("is_accessor") 223 SB
449 1619 45 (in ) 51 SB
500 1619 63 (the ) 69 SB
569 1619 218 (access_flags ) 224 SB
793 1619 87 (field ) 93 SB
886 1619 44 (of ) 50 SB
936 1619 63 (the ) 69 SB
1005 1619 382 (gss_priv_attribute_set ) 388 SB
1393 1619 99 (input ) 105 SB
1498 1619 181 (parameter ) 187 SB
1685 1619 43 (to ) 49 SB
1734 1619 307 (gss_modify_cred. ) 313 SB
2047 1619 11 ( ) 17 SB
2064 1619 36 (In) 36 SB
449 1669 73 (this ) 74 SB
523 1669 93 (case, ) 94 SB
617 1669 142 (security ) 144 SB
761 1669 150 (contexts ) 152 SB
913 1669 151 (initiated ) 153 SB
1066 1669 50 (by ) 52 SB
1118 1669 88 (such ) 90 SB
1208 1669 52 (an ) 54 SB
1262 1669 223 (intermediate ) 225 SB
1487 1669 113 (server ) 115 SB
1602 1669 93 (must ) 95 SB
1697 1669 168 (explicitly ) 170 SB
1867 1669 128 (specify ) 130 SB
1997 1669 103 (which) 103 SB
449 1719 150 (delegate ) 167 SB
616 1719 194 (credentials ) 211 SB
827 1719 63 (are ) 80 SB
907 1719 43 (to ) 60 SB
967 1719 49 (be ) 66 SB
1033 1719 175 (combined ) 192 SB
1225 1719 86 (with ) 103 SB
1328 1719 63 (the ) 80 SB
1408 1719 167 (initiating ) 184 SB
1592 1719 105 (user's ) 123 SB
1715 1719 194 (credentials ) 212 SB
1927 1719 103 (using ) 121 SB
2048 1719 52 (the) 52 SB
449 1769 534 (gss_compound_cred_operation.) 534 SB
449 1869 77 (The ) 78 SB
527 1869 354 (gss_compound_cred ) 355 SB
882 1869 170 (operation ) 171 SB
1053 1869 102 (emits ) 103 SB
1156 1869 30 (a ) 31 SB
1187 1869 178 (credential ) 180 SB
1367 1869 125 (handle ) 127 SB
1494 1869 114 (which ) 116 SB
1610 1869 70 (can ) 72 SB
1682 1869 49 (be ) 51 SB
1733 1869 87 (used ) 89 SB
1822 1869 45 (in ) 47 SB
1869 1869 63 (the ) 65 SB
1934 1869 97 (same ) 99 SB
2033 1869 67 (way) 67 SB
449 1919 1145 (as any credential in the subsequent gss_init_sec_context operations.) 1145 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (12) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Roman
%%Page: 13 13
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
300 319 91 (8. S) 91 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
391 330 218 (UMMARY) 218 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 463 77 (The ) 84 SB
384 463 168 (GSS-API ) 175 SB
559 463 39 (is ) 46 SB
605 463 92 (most ) 99 SB
704 463 105 (likely ) 112 SB
816 463 43 (to ) 50 SB
866 463 49 (be ) 56 SB
922 463 63 (the ) 70 SB
992 463 156 (accepted ) 163 SB
1155 463 156 (standard ) 163 SB
1318 463 59 (for ) 66 SB
1384 463 148 (portable ) 155 SB
1539 463 169 (provision ) 176 SB
1715 463 44 (of ) 51 SB
1766 463 142 (security ) 150 SB
1916 463 144 (services ) 152 SB
2068 463 32 (to) 32 SB
300 513 191 (distributed ) 197 SB
497 513 210 (application. ) 216 SB
713 513 171 (However, ) 177 SB
890 513 35 (it ) 41 SB
931 513 68 (has ) 74 SB
1005 513 89 (been ) 95 SB
1100 513 120 (shown ) 126 SB
1226 513 76 (that ) 82 SB
1308 513 63 (the ) 69 SB
1377 513 88 (gaps ) 94 SB
1471 513 45 (in ) 51 SB
1522 513 63 (the ) 69 SB
1591 513 145 (existing ) 151 SB
1742 513 168 (GSS-API ) 174 SB
1916 513 90 (need ) 96 SB
2012 513 43 (to ) 50 SB
2062 513 38 (be) 38 SB
300 563 99 (filled ) 115 SB
415 563 43 (to ) 59 SB
474 563 120 (enable ) 136 SB
610 563 63 (the ) 79 SB
689 563 162 (extended ) 178 SB
867 563 168 (GSS-API ) 184 SB
1051 563 43 (to ) 59 SB
1110 563 138 (provide ) 154 SB
1264 563 137 (support ) 153 SB
1417 563 59 (for ) 75 SB
1492 563 52 (an ) 68 SB
1560 563 160 (adequate ) 176 SB
1736 563 106 (range ) 123 SB
1859 563 44 (of ) 61 SB
1920 563 180 (distributed) 180 SB
300 613 377 (authorisation services.) 377 SB
300 713 41 (A ) 44 SB
344 713 57 (set ) 60 SB
404 713 44 (of ) 47 SB
451 713 188 (extensions ) 191 SB
642 713 180 (developed ) 183 SB
825 713 50 (by ) 53 SB
878 713 63 (the ) 66 SB
944 713 176 (SESAME ) 179 SB
1123 713 126 (project ) 129 SB
1252 713 90 (have ) 93 SB
1345 713 89 (been ) 92 SB
1437 713 170 (discussed ) 173 SB
1610 713 114 (which ) 117 SB
1727 713 138 (provide ) 141 SB
1868 713 97 (these ) 100 SB
1968 713 132 (missing) 132 SB
300 763 155 (services. ) 168 SB
468 763 77 (The ) 90 SB
558 763 176 (SESAME ) 189 SB
747 763 162 (extended ) 175 SB
922 763 168 (GSS-API ) 181 SB
1103 763 39 (is ) 53 SB
1156 763 136 (aligned ) 150 SB
1306 763 86 (with ) 100 SB
1406 763 125 (known ) 139 SB
1545 763 81 (user ) 95 SB
1640 763 232 (requirements ) 246 SB
1886 763 88 (such ) 102 SB
1988 763 46 (as ) 60 SB
2048 763 52 (are) 52 SB
300 813 190 (articulated ) 197 SB
497 813 45 (in ) 52 SB
549 813 249 ([TDP-GASP], ) 257 SB
806 813 70 (can ) 78 SB
884 813 137 (support ) 145 SB
1029 813 145 (existing ) 153 SB
1182 813 195 (technology ) 203 SB
1385 813 88 (such ) 96 SB
1481 813 46 (as ) 54 SB
1535 813 39 (is ) 47 SB
1582 813 104 (being ) 112 SB
1694 813 180 (developed ) 188 SB
1882 813 45 (in ) 53 SB
1935 813 95 (DCE ) 103 SB
2038 813 62 (and) 62 SB
300 863 1070 (SESAME, and fits with emerging ISO work such as in [GSAI].) 1070 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 1013 411 (Acknowledgements) 411 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 1122 25 (I ) 26 SB
326 1122 114 (would ) 115 SB
441 1122 74 (like ) 75 SB
516 1122 43 (to ) 44 SB
560 1122 107 (thank ) 108 SB
668 1122 109 (Denis ) 110 SB
778 1122 124 (Pinkas ) 125 SB
903 1122 73 (and ) 74 SB
977 1122 82 (Eric ) 83 SB
1060 1122 106 (Baize ) 107 SB
1167 1122 59 (for ) 60 SB
1227 1122 178 (reviewing ) 179 SB
1406 1122 73 (and ) 74 SB
1480 1122 175 (providing ) 176 SB
1656 1122 104 (many ) 105 SB
1761 1122 112 (useful ) 113 SB
1874 1122 183 (comments ) 184 SB
2058 1122 42 (on) 42 SB
300 1172 178 (this paper.) 178 SB
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 1322 374 (Author's Address) 374 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 1431 270 (Piers McMahon) 270 SB
300 1481 102 (Email) 102 SB
448 1481 650 ([email-masked]) 650 SB
448 1531 442 ([email-masked]) 442 SB
300 1581 83 (Post:) 83 SB
448 1581 786 (ICL, 33 Kings House, Reading, RG1 3PX, UK) 786 SB
300 1631 117 (Phone:) 117 SB
448 1631 393 (+44 734 586211 x3285) 393 SB
300 1681 75 (Fax:) 75 SB
448 1681 277 (+44 734 855105) 277 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (13) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Times-Bold
%%+ font Times-Roman
%%Page: 14 14
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 50 50 0 0 0 46 /Times-Bold /font29 ANSIFont font
300 269 230 (References) 230 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 378 185 ([GSS-API]) 185 SB
773 378 1041 (J Linn, Generic Security Service API \(Internet Draft\), APR93) 1041 SB
300 478 202 ([GSS-DCE]) 202 SB
773 478 776 (J Linn, GSS-API Extensions for DCE, JUN92) 776 SB
300 578 125 ([GSAI]) 125 SB
773 578 898 (N Pope, Generic Security Abstract Interface, MAR92) 898 SB
300 678 162 ([RFC-19]) 162 SB
773 678 1155 (B Fairthorne, Proposed Security Enhancements for DCE1.1, DEC92) 1155 SB
300 778 141 ([RFC-3]) 141 SB
773 778 27 (J ) 45 SB
818 778 96 (Pato, ) 114 SB
932 778 186 (Extending ) 204 SB
1136 778 63 (the ) 81 SB
1217 778 95 (DCE ) 113 SB
1330 778 244 (Authorisation ) 262 SB
1592 778 119 (Model ) 137 SB
1729 778 43 (to ) 61 SB
1790 778 144 (Support ) 162 SB
1952 778 148 (Practical) 148 SB
773 828 323 (Delegation, JUN92) 323 SB
300 928 165 ([RFC-3+]) 165 SB
773 928 784 (M Erdos and J Pato, Extending the OSF DCE ) 785 SB
1558 928 244 (Authorisation ) 245 SB
1803 928 119 (Model ) 120 SB
1923 928 43 (to ) 44 SB
1967 928 133 (Support) 133 SB
773 978 483 (Practical Delegation, FEB93) 483 SB
300 1078 227 ([TDP-GASP]) 227 SB
773 1078 1173 (UK Ministry of Defence - Generic Architecture for Secure Processing) 1173 SB
300 1178 123 ([ACM]) 123 SB
773 1178 1015 (ECMA Draft Standard, Association Context Management - ) 1016 SB
1789 1178 172 (including ) 173 SB
1962 1178 138 (Security) 138 SB
773 1228 508 (Context Management, Draft 7) 508 SB
300 1328 186 ([OSI-SEC]) 186 SB
773 1328 1257 (ISO/IEC IS 7498-2, Information Technology - OSI - Security Architecture) 1257 SB
300 1428 280 ([SEC-FRM-OV]) 280 SB
773 1428 1312 (ISO/IEC CD 10181-1, ISO/IEC JTC1/SC21 N7083, Information Technology ) 1313 SB
2086 1428 14 (-) 14 SB
773 1478 78 (OSI ) 82 SB
855 1478 25 (- ) 29 SB
884 1478 149 (Security ) 154 SB
1038 1478 220 (Frameworks ) 225 SB
1263 1478 45 (in ) 50 SB
1313 1478 102 (Open ) 107 SB
1420 1478 148 (Systems ) 153 SB
1573 1478 25 (- ) 30 SB
1603 1478 80 (Part ) 85 SB
1688 1478 44 (1: ) 49 SB
1737 1478 149 (Security ) 154 SB
1891 1478 209 (Frameworks) 209 SB
773 1528 162 (Overview) 162 SB
300 1628 334 ([SEC-FRM-AUTH]) 334 SB
773 1628 158 (ISO/IEC ) 160 SB
933 1628 78 (DIS ) 80 SB
1013 1628 162 (10181-2, ) 164 SB
1177 1628 213 (Information ) 215 SB
1392 1628 209 (Technology ) 211 SB
1603 1628 25 (- ) 27 SB
1630 1628 78 (OSI ) 81 SB
1711 1628 25 (- ) 28 SB
1739 1628 149 (Security ) 152 SB
1891 1628 209 (Frameworks) 209 SB
773 1678 900 (in Open Systems - Part 2: Authentication Framework) 900 SB
300 1778 278 ([SEC-FRM-AC]) 278 SB
773 1778 1312 (ISO/IEC CD 10181-3, ISO/IEC JTC1/SC21 N6168, Information Technology ) 1313 SB
2086 1778 14 (-) 14 SB
773 1828 1172 (OSI - Security Frameworks in Open Systems - Part 3: Access Control) 1172 SB
300 1928 186 ([OSI-ULS]) 186 SB
773 1928 158 (ISO/IEC ) 161 SB
934 1928 78 (DIS ) 81 SB
1015 1928 127 (10745, ) 131 SB
1146 1928 213 (Information ) 217 SB
1363 1928 209 (Technology ) 213 SB
1576 1928 25 (- ) 29 SB
1605 1928 78 (OSI ) 82 SB
1687 1928 25 (- ) 29 SB
1716 1928 115 (Upper ) 119 SB
1835 1928 123 (Layers ) 127 SB
1962 1928 138 (Security) 138 SB
773 1978 108 (Model) 108 SB
300 2078 295 ([OSI-ULS-COM]) 295 SB
773 2078 158 (ISO/IEC ) 176 SB
949 2078 207 (JTC1/SC21 ) 225 SB
1174 2078 136 (N7621, ) 154 SB
1328 2078 92 (table ) 110 SB
1438 2078 44 (of ) 62 SB
1500 2078 123 (replies ) 141 SB
1641 2078 53 (on ) 71 SB
1712 2078 158 (ISO/IEC ) 176 SB
1888 2078 78 (DIS ) 96 SB
1984 2078 116 (10745,) 116 SB
773 2128 1227 (Information Technology - OSI - Upper Layers Security Model, 22FEB93) 1227 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (14) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Times-Bold
%%+ font Times-Roman
%%Page: 15 15
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
300 319 42 (A) 42 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
342 330 215 (PPENDIX ) 215 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
557 319 133 (A - R) 133 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
690 330 407 (ELATIONSHIP OF ) 407 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1097 319 39 (E) 39 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1136 330 238 (XTENDED ) 238 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1374 319 244 (GSS-API ) 244 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1618 330 79 (TO ) 79 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1697 319 173 (ISO W) 173 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1870 330 105 (ORK) 105 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 510 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 513 409 (Upper Layers Security) 409 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 613 1361 (The extended GSS-API described here defines a set of operations which provide ) 1362 SB
1736 613 52 (an ) 53 SB
1789 613 277 (implementation ) 278 SB
2067 613 33 (of) 33 SB
374 663 63 (the ) 67 SB
441 663 142 ("system ) 146 SB
587 663 142 (security ) 146 SB
733 663 168 (function" ) 172 SB
905 663 140 (concept ) 144 SB
1049 663 46 (as ) 50 SB
1099 663 136 (defined ) 140 SB
1239 663 45 (in ) 49 SB
1288 663 208 ([OSI-ULS]. ) 212 SB
1500 663 95 (Such ) 99 SB
1599 663 125 (system ) 130 SB
1729 663 142 (security ) 147 SB
1876 663 167 (functions ) 172 SB
2048 663 52 (are) 52 SB
374 713 1070 (general in nature, and are not unique to the OSI Upper Layers, ) 1071 SB
1445 713 68 (nor ) 69 SB
1514 713 63 (are ) 64 SB
1578 713 82 (they ) 83 SB
1661 713 184 (dependent ) 185 SB
1846 713 53 (on ) 54 SB
1900 713 71 (any ) 72 SB
1972 713 128 (specific) 128 SB
374 763 454 (communications protocols.) 454 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 910 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 913 472 (OSI Security Architecture) 472 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1013 47 (In ) 54 SB
428 1013 147 (general, ) 154 SB
582 1013 125 (system ) 132 SB
714 1013 142 (security ) 149 SB
863 1013 167 (functions ) 174 SB
1037 1013 63 (are ) 70 SB
1107 1013 187 (supportive ) 195 SB
1302 1013 44 (of ) 52 SB
1354 1013 11 ( ) 19 SB
1373 1013 291 (protocol-specific ) 299 SB
1672 1013 142 (security ) 150 SB
1822 1013 278 (communications) 278 SB
374 1063 167 (functions ) 168 SB
542 1063 73 (and ) 75 SB
617 1063 63 (the ) 65 SB
682 1063 277 (implementation ) 279 SB
961 1063 44 (of ) 46 SB
1007 1063 78 (OSI ) 80 SB
1087 1063 142 (security ) 144 SB
1231 1063 155 (services. ) 157 SB
1388 1063 77 (The ) 79 SB
1467 1063 84 (base ) 86 SB
1553 1063 168 (GSS-API ) 170 SB
1723 1063 171 (addresses ) 173 SB
1896 1063 104 (many ) 106 SB
2002 1063 44 (of ) 46 SB
2048 1063 52 (the) 52 SB
374 1113 144 (services ) 148 SB
522 1113 136 (defined ) 141 SB
663 1113 45 (in ) 50 SB
713 1113 208 ([OSI-SEC], ) 213 SB
926 1113 75 (but, ) 80 SB
1006 1113 117 (unlike ) 122 SB
1128 1113 208 ([OSI-SEC], ) 213 SB
1341 1113 39 (is ) 44 SB
1385 1113 131 (limited ) 136 SB
1521 1113 43 (to ) 48 SB
1569 1113 52 (an ) 57 SB
1626 1113 247 (identity-based ) 252 SB
1878 1113 222 (authorisation) 222 SB
374 1163 126 (model. ) 131 SB
505 1163 77 (The ) 82 SB
587 1163 162 (extended ) 167 SB
754 1163 168 (GSS-API ) 173 SB
927 1163 151 (includes ) 156 SB
1083 1163 63 (the ) 68 SB
1151 1163 84 (base ) 89 SB
1240 1163 168 (GSS-API ) 173 SB
1413 1163 64 (but ) 69 SB
1482 1163 78 (also ) 84 SB
1566 1163 155 (specifies ) 161 SB
1727 1163 188 (extensions ) 194 SB
1921 1163 114 (which ) 120 SB
2041 1163 59 (can) 59 SB
374 1213 137 (support ) 144 SB
518 1213 190 (alternative ) 197 SB
715 1213 233 (authorisation ) 240 SB
955 1213 131 (models ) 138 SB
1093 1213 102 (\(such ) 109 SB
1202 1213 46 (as ) 54 SB
1256 1213 209 (role-based\), ) 217 SB
1473 1213 73 (and ) 81 SB
1554 1213 111 (richer ) 119 SB
1673 1213 108 (forms ) 116 SB
1789 1213 44 (of ) 52 SB
1841 1213 116 (access ) 124 SB
1965 1213 135 (controls) 135 SB
374 1263 772 (\(such as selective delegation of access rights\).) 772 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1410 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 1413 387 (Security Frameworks) 387 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1513 77 (The ) 79 SB
453 1513 162 (extended ) 164 SB
617 1513 168 (GSS-API ) 170 SB
787 1513 39 (is ) 41 SB
828 1513 179 (consistent ) 181 SB
1009 1513 86 (with ) 88 SB
1097 1513 63 (the ) 65 SB
1162 1513 78 (ISO ) 80 SB
1242 1513 149 (Security ) 151 SB
1393 1513 204 (Framework ) 206 SB
1599 1513 50 (by ) 52 SB
1651 1513 192 (supporting ) 194 SB
1845 1513 63 (the ) 65 SB
1910 1513 190 (operational) 190 SB
374 1563 135 (generic ) 146 SB
520 1563 142 (security ) 153 SB
673 1563 144 (services ) 155 SB
828 1563 59 (for ) 71 SB
899 1563 201 (generation, ) 213 SB
1112 1563 215 (verification, ) 227 SB
1339 1563 73 (and ) 85 SB
1424 1563 196 (acquisition ) 208 SB
1632 1563 44 (of ) 56 SB
1688 1563 142 (security ) 154 SB
1842 1563 211 (information ) 223 SB
2065 1563 35 (as) 35 SB
374 1613 136 (defined ) 138 SB
512 1613 45 (in ) 47 SB
559 1613 302 ([SEC-FRM-OV]. ) 304 SB
863 1613 158 (Through ) 160 SB
1023 1613 97 (these ) 99 SB
1122 1613 135 (generic ) 137 SB
1259 1613 155 (services, ) 157 SB
1416 1613 63 (the ) 65 SB
1481 1613 162 (extended ) 165 SB
1646 1613 168 (GSS-API ) 171 SB
1817 1613 154 (provides ) 157 SB
1974 1613 126 (support) 126 SB
374 1663 59 (for ) 65 SB
439 1663 252 (authentication ) 258 SB
697 1663 197 (exchanges, ) 203 SB
900 1663 141 (transfer ) 147 SB
1047 1663 44 (of ) 50 SB
1097 1663 147 (initiator ) 153 SB
1250 1663 94 (ACI, ) 100 SB
1350 1663 73 (and ) 79 SB
1429 1663 141 (transfer ) 147 SB
1576 1663 44 (of ) 50 SB
1626 1663 114 (action ) 120 SB
1746 1663 85 (ADI ) 91 SB
1837 1663 46 (as ) 52 SB
1889 1663 170 (described ) 177 SB
2066 1663 34 (in) 34 SB
374 1713 1529 ([SEC-FRM-AUTH] and [SEC-FRM-AC] without imposing constraints on the mechanism.) 1529 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1860 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 1863 114 (GULS) 114 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1963 581 (The data generated and processed ) 582 SB
956 1963 50 (by ) 51 SB
1007 1963 63 (the ) 64 SB
1071 1963 162 (extended ) 163 SB
1234 1963 168 (GSS-API ) 169 SB
1403 1963 182 (primitives ) 183 SB
1586 1963 63 (are ) 64 SB
1650 1963 186 (equivalent ) 187 SB
1837 1963 43 (to ) 44 SB
1881 1963 63 (the ) 64 SB
1945 1963 155 ("Security) 155 SB
374 2013 178 (Exchange ) 180 SB
554 2013 88 (Item ) 90 SB
644 2013 81 (Set" ) 83 SB
727 2013 60 (\(or ) 62 SB
789 2013 111 (SEIS\) ) 113 SB
902 2013 140 (concept ) 142 SB
1044 2013 172 (identified ) 174 SB
1218 2013 45 (in ) 47 SB
1265 2013 306 ([OSI-ULS-COM] ) 308 SB
1573 2013 46 (as ) 49 SB
1622 2013 78 (part ) 81 SB
1703 2013 44 (of ) 47 SB
1750 2013 175 (AFNOR's ) 178 SB
1928 2013 172 (comments) 172 SB
374 2063 53 (on ) 58 SB
432 2063 197 ([OSI-ULS] ) 202 SB
634 2063 113 (where ) 118 SB
752 2063 88 (each ) 93 SB
845 2063 97 (SEIS ) 102 SB
947 2063 180 (comprises ) 185 SB
1132 2063 30 (a ) 35 SB
1167 2063 140 (number ) 145 SB
1312 2063 44 (of ) 49 SB
1361 2063 155 (different ) 160 SB
1521 2063 73 (and ) 78 SB
1599 2063 136 (distinct ) 141 SB
1740 2063 166 (instances ) 172 SB
1912 2063 44 (of ) 50 SB
1962 2063 138 (Security) 138 SB
374 2113 178 (Exchange ) 179 SB
553 2113 213 (Information ) 215 SB
768 2113 60 (\(or ) 62 SB
830 2113 99 (SEI\). ) 101 SB
931 2113 77 (The ) 79 SB
1010 2113 151 (contents ) 153 SB
1163 2113 44 (of ) 46 SB
1209 2113 30 (a ) 32 SB
1241 2113 97 (SEIS ) 99 SB
1340 2113 63 (are ) 65 SB
1405 2113 139 (specific ) 141 SB
1546 2113 43 (to ) 45 SB
1591 2113 30 (a ) 32 SB
1623 2113 142 (security ) 144 SB
1767 2113 204 (mechanism ) 206 SB
1973 2113 73 (and ) 75 SB
2048 2113 52 (are) 52 SB
374 2163 766 (opaque to the communications infrastructure.) 766 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (15) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 16 16
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
300 319 42 (A) 42 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
342 330 215 (PPENDIX ) 215 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
557 319 130 (B - R) 130 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
687 330 407 (ELATIONSHIP OF ) 407 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1094 319 283 (GSS-API E) 283 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1377 330 359 (XTENSIONS TO ) 359 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1736 319 210 (IETF W) 210 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1946 330 105 (ORK) 105 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 463 486 (One of the aims of the IETF ) 487 SB
787 463 244 (Authorisation ) 245 SB
1032 463 73 (and ) 74 SB
1106 463 127 (Access ) 128 SB
1234 463 140 (Control ) 141 SB
1375 463 80 (WG ) 81 SB
1456 463 113 (\(AAC ) 114 SB
1570 463 94 (WG\) ) 95 SB
1665 463 39 (is ) 40 SB
1705 463 43 (to ) 44 SB
1749 463 115 (define ) 116 SB
1865 463 52 (an ) 53 SB
1918 463 78 (API ) 79 SB
1997 463 103 (which) 103 SB
300 513 70 (can ) 71 SB
371 513 137 (support ) 138 SB
509 513 116 (access ) 117 SB
626 513 130 (control ) 131 SB
757 513 166 (decisions ) 167 SB
924 513 59 (for ) 60 SB
984 513 215 (applications ) 216 SB
1200 513 113 (where ) 114 SB
1314 513 233 (authorisation ) 234 SB
1548 513 166 (decisions ) 168 SB
1716 513 63 (are ) 65 SB
1781 513 103 (local, ) 105 SB
1886 513 64 (but ) 66 SB
1952 513 70 (can ) 72 SB
2024 513 76 (later) 76 SB
300 563 702 (fit with distributed authorisation services.) 702 SB
300 763 709 (The current expectation is that the output ) 710 SB
1010 763 44 (of ) 45 SB
1055 763 63 (the ) 64 SB
1119 763 175 (combined ) 176 SB
1295 763 168 (GSS-API ) 169 SB
1464 763 73 (and ) 74 SB
1538 763 191 (distributed ) 192 SB
1730 763 236 (authorization ) 237 SB
1967 763 133 (services) 133 SB
300 813 1497 (will be a security context \(or a set of credentials\) which is fed into the authorisation API.) 1497 SB
300 913 774 (The diagram below shows the flow of control.) 774 SB
32 0 0 33 33 0 0 0 27 /Courier /font0 ANSIFont font
374 1011 1320 (                        This is the security context to be defined) 1320 SB
374 1047 620 (                              /) 620 SB
374 1083 1460 (-----+  +---------+  +-------X---------+ +-------> Authorisation decision) 1460 SB
374 1119 840 (     |  |         |  |                 | |) 840 SB
374 1155 840 (     V  |         V  |                 V |) 840 SB
374 1191 940 (    GSSAPI        Dist            Authorisation) 940 SB
374 1227 820 (             Authorisation            API) 820 SB
374 1263 540 (+----possibly combined----+) 540 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 1401 91 (Note ) 92 SB
392 1401 76 (that ) 77 SB
469 1401 63 (the ) 64 SB
533 1401 233 (authorisation ) 235 SB
768 1401 78 (API ) 80 SB
848 1401 76 (will ) 78 SB
926 1401 138 (provide ) 140 SB
1066 1401 220 (mechanisms ) 222 SB
1288 1401 43 (to ) 45 SB
1333 1401 105 (query ) 107 SB
1440 1401 30 (a ) 32 SB
1472 1401 92 (local ) 94 SB
1566 1401 233 (authorisation ) 235 SB
1801 1401 155 (database ) 157 SB
1958 1401 43 (to ) 45 SB
2003 1401 97 (check) 97 SB
300 1451 233 (authorisation.) 233 SB
300 1651 187 (Therefore, ) 189 SB
489 1651 45 (in ) 47 SB
536 1651 100 (order ) 102 SB
638 1651 59 (for ) 61 SB
699 1651 30 (a ) 32 SB
731 1651 112 (single ) 114 SB
845 1651 175 (combined ) 177 SB
1022 1651 158 (interface ) 160 SB
1182 1651 43 (to ) 46 SB
1228 1651 49 (be ) 52 SB
1280 1651 159 (provided ) 162 SB
1442 1651 114 (which ) 117 SB
1559 1651 176 (integrates ) 179 SB
1738 1651 233 (authorisation ) 236 SB
1974 1651 126 (support) 126 SB
300 1701 144 (services ) 148 SB
448 1701 77 (into ) 82 SB
530 1701 63 (the ) 68 SB
598 1701 179 (GSS-API, ) 184 SB
782 1701 63 (the ) 68 SB
850 1701 154 (GSSAPI ) 159 SB
1009 1701 142 (security ) 147 SB
1156 1701 134 (context ) 139 SB
1295 1701 120 (and/or ) 125 SB
1420 1701 194 (credentials ) 199 SB
1619 1701 90 (need ) 95 SB
1714 1701 43 (to ) 48 SB
1762 1701 49 (be ) 54 SB
1816 1701 162 (extended ) 167 SB
1983 1701 47 (so ) 52 SB
2035 1701 65 (that) 65 SB
300 1751 988 (they can be used directly as input to the authorisation API.) 988 SB
300 1851 87 (This ) 101 SB
401 1851 76 (will ) 90 SB
491 1851 120 (enable ) 134 SB
625 1851 63 (the ) 77 SB
702 1851 176 (privileges ) 190 SB
892 1851 73 (and ) 87 SB
979 1851 199 (restrictions ) 213 SB
1192 1851 182 (associated ) 196 SB
1388 1851 86 (with ) 100 SB
1488 1851 63 (the ) 77 SB
1565 1851 105 (user's ) 120 SB
1685 1851 142 (security ) 157 SB
1842 1851 134 (context ) 149 SB
1991 1851 109 (and/or) 109 SB
300 1901 1020 (credentials to be used as input to the access control decision.) 1020 SB
300 2101 991 (Work is currently underway in the AAC WG to define the ) 992 SB
1292 2101 204 (mechanism ) 205 SB
1497 2101 59 (for ) 60 SB
1557 2101 178 (extending ) 179 SB
1736 2101 63 (the ) 64 SB
1800 2101 168 (GSS-API ) 169 SB
1969 2101 131 (security) 131 SB
300 2151 581 (context and the authorisation API.) 581 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (16) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 17 17
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
300 319 42 (A) 42 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
342 330 215 (PPENDIX ) 215 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
557 319 136 (C - G) 136 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
693 330 191 (ENERIC ) 191 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
884 319 283 (GSS-API E) 283 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1167 330 268 (XTENSIONS) 268 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 463 77 (The ) 84 SB
384 463 172 (following ) 179 SB
563 463 39 (is ) 46 SB
609 463 30 (a ) 37 SB
646 463 144 (detailed ) 151 SB
797 463 198 (description ) 205 SB
1002 463 59 (for ) 66 SB
1068 463 88 (each ) 95 SB
1163 463 44 (of ) 52 SB
1215 463 63 (the ) 71 SB
1286 463 144 (Generic ) 152 SB
1438 463 168 (GSS-API ) 176 SB
1614 463 199 (extensions, ) 207 SB
1821 463 172 (including ) 180 SB
2001 463 63 (the ) 71 SB
2072 463 28 (C) 28 SB
300 513 554 (definitions and supporting types:) 554 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 610 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
375 613 586 (Description of gss_get_attributes) 586 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 713 87 (This ) 90 SB
464 713 78 (API ) 81 SB
545 713 130 (allows, ) 133 SB
678 713 36 (if ) 39 SB
717 713 63 (the ) 66 SB
783 713 194 (underlying ) 197 SB
980 713 204 (mechanism ) 207 SB
1187 713 153 (supports ) 156 SB
1343 713 46 (it, ) 50 SB
1393 713 30 (a ) 34 SB
1427 713 105 (caller ) 109 SB
1536 713 43 (to ) 47 SB
1583 713 138 (enquire ) 142 SB
1725 713 63 (the ) 67 SB
1792 713 132 (current ) 136 SB
1928 713 101 (value ) 105 SB
2033 713 44 (of ) 48 SB
2081 713 19 (a) 19 SB
374 763 190 (nominated ) 198 SB
572 763 116 (access ) 124 SB
696 763 130 (control ) 138 SB
834 763 152 (attribute ) 160 SB
994 763 81 (type ) 89 SB
1083 763 45 (in ) 54 SB
1137 763 63 (the ) 72 SB
1209 763 160 (specified ) 169 SB
1378 763 194 (credentials ) 203 SB
1581 763 73 (and ) 82 SB
1663 763 208 (\(optionally\) ) 217 SB
1880 763 145 (context. ) 154 SB
2034 763 66 (The) 66 SB
374 813 1325 (requested attribute value is returned together with the policy authority \(if any\).) 1325 SB
374 913 87 (This ) 89 SB
463 913 78 (API ) 80 SB
543 913 70 (can ) 72 SB
615 913 49 (be ) 51 SB
666 913 87 (used ) 89 SB
755 913 50 (by ) 52 SB
807 913 167 (initiating ) 169 SB
976 913 132 (clients, ) 134 SB
1110 913 177 (delegates, ) 179 SB
1289 913 73 (and ) 75 SB
1364 913 129 (servers ) 131 SB
1495 913 43 (to ) 46 SB
1541 913 105 (query ) 108 SB
1649 913 168 (attributes ) 171 SB
1820 913 45 (in ) 48 SB
1868 913 194 (credentials ) 197 SB
2065 913 35 (or) 35 SB
374 963 292 (security contexts.) 292 SB
374 1063 38 (If ) 40 SB
414 1063 63 (the ) 65 SB
479 1063 421 (attribute_types_required ) 423 SB
902 1063 181 (parameter ) 183 SB
1085 1063 39 (is ) 41 SB
1126 1063 65 (not ) 67 SB
1193 1063 164 (supplied, ) 166 SB
1359 1063 85 (then ) 87 SB
1446 1063 54 (all ) 56 SB
1502 1063 168 (attributes ) 170 SB
1672 1063 63 (are ) 65 SB
1737 1063 164 (returned. ) 166 SB
1903 1063 87 (This ) 90 SB
1993 1063 107 (option) 107 SB
374 1113 103 (could ) 104 SB
478 1113 103 (allow ) 104 SB
582 1113 121 (clients ) 122 SB
704 1113 44 (of ) 45 SB
749 1113 73 (this ) 74 SB
823 1113 158 (interface ) 159 SB
982 1113 43 (to ) 44 SB
1026 1113 138 (enquire ) 139 SB
1165 1113 54 (all ) 56 SB
1221 1113 168 (attributes ) 170 SB
1391 1113 73 (and ) 75 SB
1466 1113 83 (pass ) 85 SB
1551 1113 97 (these ) 99 SB
1650 1113 43 (to ) 45 SB
1695 1113 30 (a ) 32 SB
1727 1113 149 (separate ) 151 SB
1878 1113 222 (authorisation) 222 SB
374 1163 453 (service to make a decision.) 453 SB
374 1263 38 (If ) 45 SB
419 1263 152 (retrieval ) 159 SB
578 1263 44 (of ) 51 SB
629 1263 116 (access ) 123 SB
752 1263 130 (control ) 137 SB
889 1263 168 (attributes ) 175 SB
1064 1263 63 (are ) 70 SB
1134 1263 65 (not ) 72 SB
1206 1263 187 (supported, ) 194 SB
1400 1263 46 (or ) 53 SB
1453 1263 98 (some ) 105 SB
1558 1263 98 (other ) 105 SB
1663 1263 121 (failure ) 128 SB
1791 1263 157 (occurred ) 164 SB
1955 1263 85 (then ) 93 SB
2048 1263 52 (the) 52 SB
374 1313 1228 (major_status returned is mechanism-specific, else GSS_C_COMPLETE.) 1228 SB
374 1413 87 (This ) 90 SB
464 1413 158 (interface ) 161 SB
625 1413 138 (permits ) 141 SB
766 1413 425 (mechanism-independent ) 428 SB
1194 1413 152 (retrieval ) 155 SB
1349 1413 44 (of ) 47 SB
1396 1413 126 (trusted ) 129 SB
1525 1413 233 (authorisation ) 236 SB
1761 1413 222 (information, ) 225 SB
1986 1413 114 (which,) 114 SB
374 1463 912 (depending on the environment might be, for example:) 912 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 392 3231 0 0 CB
373 1559 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
448 1563 96 (DCE:) 96 SB
744 1563 765 (the user's group or other privilege server data) 765 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 392 3231 0 0 CB
373 1659 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
448 1663 164 (Kerberos:) 164 SB
744 1663 412 (the user's access identity) 412 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 392 3231 0 0 CB
373 1759 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
448 1763 133 (ECMA:) 133 SB
744 1763 63 (the ) 75 SB
819 1763 105 (user's ) 117 SB
936 1763 116 (access ) 128 SB
1064 1763 150 (identity, ) 162 SB
1226 1763 87 (role, ) 99 SB
1325 1763 73 (and ) 85 SB
1410 1763 109 (group ) 121 SB
1531 1763 231 (membership; ) 244 SB
1775 1763 63 (the ) 76 SB
1851 1763 96 (audit ) 109 SB
1960 1763 140 (identity;) 140 SB
744 1813 357 ( controls; restrictions) 357 SB
374 1913 1139 (Two important usages of this API in a DCE environment would be:) 1139 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 2009 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 2013 284 (audit-id retrieval) 284 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 393 3231 0 0 CB
374 2109 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
449 2113 1635 (use by ACL manager \(instead of passing PAC via rpc_binding_inq_auth_client\) to get privileges) 1635 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 2313 753 (Function definition for gss_get_attributes:) 753 SB
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
448 2411 1625 (/* get attributes associated with credentials or security context) 1625 SB
448 2456 75 ( */) 75 SB
448 2501 700 (OM_uint32 gss_get_attributes) 700 SB
448 2546 25 (\() 25 SB
448 2591 325 (gss_cred_id_t) 325 SB
892 2591 300 (cred_handle,) 300 SB
1780 2591 200 (/* IN */) 200 SB
448 2636 300 (gss_ctx_id_t) 300 SB
892 2636 375 (context_handle,) 375 SB
1780 2636 200 (/* IN */) 200 SB
448 2681 250 (gss_id_set) 250 SB
892 2681 625 (attribute_types_required,) 625 SB
1780 2681 200 (/* IN */) 200 SB
448 2726 250 (OM_uint32*) 250 SB
892 2726 325 (minor_status,) 325 SB
1780 2726 200 (/* OUT*/) 200 SB
448 2771 850 (gss_priv_attribute_set attributes,) 850 SB
1780 2771 200 (/* OUT*/) 200 SB
448 2816 1150 (gss_target_control_set actual_target_controls,) 1150 SB
1780 2816 200 (/* OUT*/) 200 SB
448 2861 50 (\);) 50 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (17) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 18 18
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 269 619 (Parameters for gss_get_attributes:) 619 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 370 207 (cred_handle) 207 SB
374 420 133 (Handle ) 142 SB
516 420 44 (to ) 53 SB
569 420 206 (credentials, ) 215 SB
784 420 218 (cred_handle ) 227 SB
1011 420 107 (refers ) 116 SB
1127 420 44 (to ) 53 SB
1180 420 51 (an ) 60 SB
1240 420 238 (authenticated ) 247 SB
1487 420 173 (principal. ) 183 SB
1670 420 86 (This ) 96 SB
1766 420 181 (parameter ) 191 SB
1957 420 93 (must ) 103 SB
2060 420 40 (be) 40 SB
374 470 154 (supplied ) 167 SB
541 470 37 (if ) 50 SB
591 470 270 (context_handle ) 283 SB
874 470 39 (is ) 52 SB
926 470 65 (not ) 78 SB
1004 470 165 (supplied. ) 179 SB
1183 470 130 (Supply ) 144 SB
1327 470 502 (GSS_C_NO_CREDENTIAL ) 516 SB
1843 470 44 (to ) 58 SB
1901 470 67 (use ) 81 SB
1982 470 118 (default) 118 SB
374 520 195 (credentials.) 195 SB
374 620 259 (context_handle) 259 SB
374 670 1005 (GSS-API security context handle, context_handle refers to ) 1006 SB
1380 670 51 (an ) 52 SB
1432 670 199 (established ) 200 SB
1632 670 210 (association. ) 211 SB
1843 670 86 (This ) 87 SB
1930 670 170 (parameter) 170 SB
374 720 93 (must ) 95 SB
469 720 51 (be ) 53 SB
522 720 154 (supplied ) 156 SB
678 720 37 (if ) 40 SB
718 720 11 ( ) 14 SB
732 720 218 (cred_handle ) 221 SB
953 720 39 (is ) 42 SB
995 720 65 (not ) 68 SB
1063 720 154 (supplied ) 157 SB
1220 720 78 (\(i.e. ) 81 SB
1301 720 218 (cred_handle ) 221 SB
1522 720 59 (== ) 62 SB
1584 720 516 (GSS_C_NO_CREDENTIAL\).) 516 SB
374 770 195 (Otherwise, ) 225 SB
599 770 78 (\(i.e. ) 108 SB
707 770 218 (cred_handle ) 248 SB
955 770 49 (!= ) 79 SB
1034 770 527 (GSS_C_NO_CREDENTIAL\), ) 557 SB
1591 770 270 (context_handle ) 300 SB
1891 770 39 (is ) 69 SB
1960 770 140 (ignored.) 140 SB
374 820 119 (\(Note: ) 123 SB
497 820 35 (it ) 39 SB
536 820 39 (is ) 43 SB
579 820 160 (typically ) 164 SB
743 820 86 (only ) 90 SB
833 820 175 (necessary ) 179 SB
1012 820 44 (to ) 48 SB
1060 820 67 (use ) 71 SB
1131 820 30 (a ) 34 SB
1165 820 270 (context_handle ) 274 SB
1439 820 181 (parameter ) 185 SB
1624 820 110 (rather ) 115 SB
1739 820 84 (than ) 89 SB
1828 820 218 (cred_handle ) 223 SB
2051 820 49 (for) 49 SB
374 870 63 (the ) 82 SB
456 870 84 (case ) 103 SB
559 870 102 (when ) 121 SB
680 870 30 (a ) 49 SB
729 870 145 (security ) 164 SB
893 870 136 (context ) 155 SB
1048 870 39 (is ) 58 SB
1106 870 139 (emitted ) 159 SB
1265 870 53 (by ) 73 SB
1338 870 426 (gss_accept_sec_context, ) 446 SB
1784 870 65 (but ) 85 SB
1869 870 65 (not ) 85 SB
1954 870 86 (with ) 106 SB
2060 870 40 (an) 40 SB
374 920 745 (accompanying set of delegated credentials\).) 745 SB
374 1020 414 (attribute_types_required) 414 SB
374 1070 41 (A ) 42 SB
416 1070 58 (set ) 59 SB
475 1070 46 (of ) 47 SB
522 1070 153 (attribute ) 155 SB
677 1070 111 (types. ) 113 SB
790 1070 39 (If ) 41 SB
831 1070 63 (the ) 65 SB
896 1070 129 (default ) 131 SB
1027 1070 488 (\(GSS_C_NULL_OID_SET\) ) 490 SB
1517 1070 39 (is ) 41 SB
1558 1070 175 (specified, ) 177 SB
1735 1070 84 (then ) 86 SB
1821 1070 54 (all ) 56 SB
1877 1070 169 (attributes ) 171 SB
2048 1070 52 (are) 52 SB
374 1120 152 (returned.) 152 SB
374 1220 218 (minor_status) 218 SB
374 1270 538 (Mechanism specific status code) 538 SB
374 1370 158 (attributes) 158 SB
374 1420 1542 (A set of subject attributes. Response is conditional on the "attribute_types_required" input.) 1542 SB
374 1520 377 (actual_target_controls) 377 SB
374 1570 634 (The target controls. Always returned.) 634 SB
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 1717 928 (Response from gss_get_attributes \(GSS status code\)) 928 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1821 363 (GSS_S_COMPLETE) 363 SB
374 1871 162 (indicates ) 163 SB
537 1871 75 (that ) 76 SB
613 1871 153 (retrieval ) 154 SB
767 1871 46 (of ) 47 SB
814 1871 169 (attributes ) 170 SB
984 1871 39 (is ) 40 SB
1024 1871 177 (supported ) 178 SB
1202 1871 72 (and ) 73 SB
1275 1871 75 (that ) 76 SB
1351 1871 65 (all, ) 66 SB
1417 1871 111 (some, ) 112 SB
1529 1871 46 (or ) 47 SB
1576 1871 93 (none ) 94 SB
1670 1871 46 (of ) 48 SB
1718 1871 63 (the ) 65 SB
1783 1871 173 (requested ) 175 SB
1958 1871 142 (attribute) 142 SB
374 1921 423 (types have been returned) 423 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2020 756 (Failure results in a mechanism-specific error) 756 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (18) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Times-Bold
%%+ font Times-Roman
%%Page: 19 19
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 266 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 269 252 (Description of) 252 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
626 270 11 ( ) 11 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
637 269 299 (gss_modify_cred) 299 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 369 77 (The ) 81 SB
455 369 92 (form ) 96 SB
551 369 44 (of ) 48 SB
599 369 63 (the ) 67 SB
666 369 72 (call ) 76 SB
742 369 39 (is ) 43 SB
785 369 46 (as ) 50 SB
835 369 145 (follows: ) 149 SB
984 369 30 (a ) 34 SB
1018 369 57 (set ) 61 SB
1079 369 44 (of ) 48 SB
1127 369 160 (privilege ) 165 SB
1292 369 168 (attributes ) 173 SB
1465 369 63 (are ) 68 SB
1533 369 182 (requested, ) 187 SB
1720 369 149 (together ) 154 SB
1874 369 86 (with ) 91 SB
1965 369 135 (controls) 135 SB
374 419 114 (which ) 121 SB
495 419 128 (qualify ) 135 SB
630 419 63 (the ) 70 SB
700 419 211 (unrestricted ) 219 SB
919 419 66 (use ) 74 SB
993 419 44 (of ) 52 SB
1045 419 99 (those ) 107 SB
1152 419 179 (attributes. ) 187 SB
1339 419 77 (The ) 85 SB
1424 419 168 (attributes ) 176 SB
1600 419 114 (which ) 122 SB
1722 419 93 (must ) 101 SB
1823 419 49 (be ) 57 SB
1880 419 173 (possessed ) 181 SB
2061 419 39 (by) 39 SB
374 469 1192 (targets which can use the PAC may be specified \(default is all targets\).) 1192 SB
374 569 87 (This ) 93 SB
467 569 128 (service ) 134 SB
601 569 127 (creates ) 133 SB
734 569 46 (or ) 52 SB
786 569 156 (modifies ) 162 SB
948 569 130 (variant ) 136 SB
1084 569 194 (credentials ) 200 SB
1284 569 36 (if ) 42 SB
1326 569 30 (a ) 36 SB
1362 569 204 (mechanism ) 210 SB
1572 569 153 (supports ) 160 SB
1732 569 46 (it. ) 53 SB
1785 569 87 (This ) 94 SB
1879 569 103 (could ) 110 SB
1989 569 111 (permit) 111 SB
374 619 116 (access ) 121 SB
495 619 130 (control ) 135 SB
630 619 199 (restrictions ) 205 SB
835 619 43 (to ) 49 SB
884 619 49 (be ) 55 SB
939 619 135 (applied ) 141 SB
1080 619 50 (by ) 56 SB
1136 619 52 (an ) 58 SB
1194 619 237 (authenticated ) 243 SB
1437 619 106 (entity ) 112 SB
1549 619 43 (to ) 49 SB
1598 619 71 (any ) 77 SB
1675 619 142 (security ) 148 SB
1823 619 150 (contexts ) 156 SB
1979 619 121 (created) 121 SB
374 669 108 (under ) 118 SB
492 669 97 (these ) 107 SB
599 669 161 (modified ) 171 SB
770 669 205 (credentials. ) 216 SB
986 669 69 (For ) 80 SB
1066 669 164 (example, ) 175 SB
1241 669 73 (this ) 84 SB
1325 669 114 (would ) 125 SB
1450 669 103 (allow ) 114 SB
1564 669 30 (a ) 41 SB
1605 669 81 (user ) 92 SB
1697 669 43 (to ) 54 SB
1751 669 105 (lower ) 116 SB
1867 669 63 (the ) 74 SB
1941 669 159 (clearance) 159 SB
374 719 182 (associated ) 186 SB
560 719 86 (with ) 90 SB
650 719 30 (a ) 34 SB
684 719 57 (set ) 61 SB
745 719 44 (of ) 48 SB
793 719 205 (credentials, ) 209 SB
1002 719 46 (or ) 50 SB
1052 719 43 (to ) 47 SB
1099 719 131 (change ) 135 SB
1234 719 63 (the ) 67 SB
1301 719 87 (role. ) 91 SB
1392 719 11 ( ) 15 SB
1407 719 65 (So, ) 69 SB
1476 719 36 (if ) 40 SB
1516 719 30 (a ) 34 SB
1550 719 105 (user's ) 109 SB
1659 719 160 (privilege ) 164 SB
1823 719 168 (attributes ) 172 SB
1995 719 82 (give ) 86 SB
2081 719 19 (a) 19 SB
374 769 170 (clearance ) 178 SB
552 769 44 (of ) 52 SB
604 769 90 (TOP ) 98 SB
702 769 178 (SECRET, ) 186 SB
888 769 85 (then ) 93 SB
981 769 102 (when ) 110 SB
1091 769 187 (contacting ) 195 SB
1286 769 30 (a ) 38 SB
1324 769 175 (particular ) 184 SB
1508 769 113 (server ) 122 SB
1630 769 82 (they ) 91 SB
1721 769 82 (may ) 91 SB
1812 769 90 (wish ) 99 SB
1911 769 43 (to ) 52 SB
1963 769 66 (use ) 75 SB
2038 769 62 (this) 62 SB
374 819 158 (interface ) 159 SB
533 819 43 (to ) 44 SB
577 819 105 (lower ) 106 SB
683 819 90 (their ) 91 SB
774 819 170 (clearance ) 171 SB
945 819 43 (to ) 44 SB
989 819 49 (be ) 50 SB
1039 819 317 (UNCLASSIFIED. ) 318 SB
1357 819 171 (Normally ) 172 SB
1529 819 88 (such ) 89 SB
1618 819 144 (services ) 145 SB
1763 819 125 (would, ) 127 SB
1890 819 210 (respectively,) 210 SB
374 869 962 (constrain  existing privileges, or result in new privileges ) 963 SB
1337 869 104 (being ) 105 SB
1442 869 171 (requested ) 172 SB
1614 869 50 (\(if ) 51 SB
1665 869 160 (possible\) ) 161 SB
1826 869 25 (- ) 26 SB
1852 869 64 (but ) 65 SB
1917 869 147 (whether ) 148 SB
2065 869 35 (or) 35 SB
374 919 1491 (not this interface triggers a call on a privilege server is unspecified at the interface level.) 1491 SB
374 1019 156 (Controls ) 169 SB
543 1019 89 (\(i.e.: ) 103 SB
646 1019 106 (usage ) 120 SB
766 1019 209 (constraints\) ) 223 SB
989 1019 53 (on ) 67 SB
1056 1019 97 (these ) 111 SB
1167 1019 160 (privilege ) 174 SB
1341 1019 168 (attributes ) 182 SB
1523 1019 82 (may ) 96 SB
1619 1019 49 (be ) 63 SB
1682 1019 171 (requested ) 185 SB
1867 1019 50 (by ) 64 SB
1931 1019 103 (using ) 117 SB
2048 1019 52 (the) 52 SB
374 1069 410 (required_target_control ) 419 SB
793 1069 192 (parameter. ) 201 SB
994 1069 87 (This ) 96 SB
1090 1069 181 (parameter ) 190 SB
1280 1069 70 (can ) 79 SB
1359 1069 128 (specify ) 138 SB
1497 1069 173 (permitted ) 183 SB
1680 1069 142 (security ) 152 SB
1832 1069 134 (context ) 144 SB
1976 1069 124 (targets,) 124 SB
374 1119 149 (together ) 159 SB
533 1119 86 (with ) 96 SB
629 1119 195 (constraints ) 205 SB
834 1119 53 (on ) 63 SB
897 1119 147 (whether ) 157 SB
1054 1119 186 (delegation ) 196 SB
1250 1119 43 (to ) 53 SB
1303 1119 99 (those ) 110 SB
1413 1119 124 (targets ) 135 SB
1548 1119 39 (is ) 50 SB
1598 1119 184 (permitted. ) 195 SB
1793 1119 234 (Additionally, ) 245 SB
2038 1119 62 (this) 62 SB
374 1169 181 (parameter ) 185 SB
559 1169 70 (can ) 74 SB
633 1169 49 (be ) 53 SB
686 1169 87 (used ) 91 SB
777 1169 43 (to ) 47 SB
824 1169 128 (specify ) 132 SB
956 1169 127 (further ) 131 SB
1087 1169 146 (controls ) 150 SB
1237 1169 88 (such ) 92 SB
1329 1169 46 (as ) 50 SB
1379 1169 63 (the ) 67 SB
1446 1169 138 (validity ) 142 SB
1588 1169 118 (period ) 122 SB
1710 1169 59 (for ) 64 SB
1774 1169 205 (credentials, ) 210 SB
1984 1169 46 (or ) 51 SB
2035 1169 65 (that) 65 SB
374 1219 785 (credentials must be revalidated at every target.) 785 SB
374 1319 38 (If ) 53 SB
427 1319 254 (setting/getting ) 269 SB
696 1319 168 (attributes ) 184 SB
880 1319 39 (is ) 55 SB
935 1319 65 (not ) 81 SB
1016 1319 157 (possible, ) 173 SB
1189 1319 46 (or ) 62 SB
1251 1319 65 (not ) 81 SB
1332 1319 204 (meaningful ) 220 SB
1552 1319 59 (for ) 75 SB
1627 1319 73 (this ) 89 SB
1716 1319 215 (mechanism, ) 231 SB
1947 1319 85 (then ) 101 SB
2048 1319 52 (the) 52 SB
374 1369 925 (major_status returned by the function indicates failure.) 925 SB
374 1469 194 (Otherwise, ) 211 SB
585 1469 226 (major_status ) 243 SB
828 1469 39 (is ) 56 SB
884 1469 389 (GSS_C_COMPLETE, ) 406 SB
1290 1469 73 (and ) 90 SB
1380 1469 460 (actual_privilege_attributes ) 477 SB
1857 1469 39 (is ) 56 SB
1913 1469 63 (the ) 80 SB
1993 1469 57 (set ) 74 SB
2067 1469 33 (of) 33 SB
374 1519 160 (privilege ) 165 SB
539 1519 168 (attributes ) 173 SB
712 1519 182 (associated ) 188 SB
900 1519 86 (with ) 92 SB
992 1519 63 (the ) 69 SB
1061 1519 346 (output_cred_handle ) 352 SB
1413 1519 205 (credentials. ) 211 SB
1624 1519 77 (The ) 83 SB
1707 1519 132 (current ) 138 SB
1845 1519 146 (controls ) 152 SB
1997 1519 103 (which) 103 SB
374 1569 103 (apply ) 137 SB
511 1569 43 (to ) 77 SB
588 1569 63 (the ) 97 SB
685 1569 160 (specified ) 194 SB
879 1569 329 (credentials/context ) 363 SB
1242 1569 63 (are ) 97 SB
1339 1569 153 (returned ) 187 SB
1526 1569 45 (in ) 80 SB
1606 1569 397 (actual_target_controls, ) 432 SB
2038 1569 62 (and) 62 SB
374 1619 460 (actual_privilege_attributes.) 460 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 1769 729 (Function definition for gss_modify_cred:) 729 SB
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
448 1867 1625 (/* request a set of privileges and controls, optionally replacing) 1625 SB
448 1912 1625 ( * existing credentials or creating a new set. The effect of this) 1625 SB
448 1957 1275 ( * interface is cumulative on a  set of credentials) 1275 SB
448 2002 75 ( */) 75 SB
448 2047 625 (OM_uint32 gss_modify_cred) 625 SB
448 2092 25 (\() 25 SB
448 2137 325 (gss_cred_id_t) 325 SB
1040 2137 300 (cred_handle,) 300 SB
1780 2137 225 ( /* IN */) 225 SB
448 2182 225 (OM_uint32) 225 SB
1040 2182 475 (duplicate_cred_req,) 475 SB
1780 2182 225 ( /* IN */) 225 SB
448 2227 225 (OM_uint32) 225 SB
1040 2227 400 (commit_cred_req,) 400 SB
1632 2227 25 ( ) 25 SB
1780 2227 225 ( /* IN */) 225 SB
448 2272 550 (gss_priv_attribute_set) 550 SB
1040 2272 975 (required_privilege_attributes, /* IN */) 975 SB
448 2317 575 (gss_target_control_set ) 575 SB
1040 2317 625 (required_target_controls,) 625 SB
1780 2317 225 ( /* IN */) 225 SB
448 2362 250 (OM_uint32*) 250 SB
1040 2362 325 (minor_status,) 325 SB
1780 2362 225 ( /* OUT*/) 225 SB
448 2407 350 (gss_cred_id_t*) 350 SB
1040 2407 475 (output_cred_handle,) 475 SB
1780 2407 225 ( /* OUT*/) 225 SB
448 2452 550 (gss_priv_attribute_set) 550 SB
1040 2452 725 (actual_privilege_attributes, ) 725 SB
1780 2452 225 ( /* OUT*/) 225 SB
448 2497 550 (gss_target_control_set) 550 SB
1040 2497 550 (actual_target_controls) 550 SB
1780 2497 225 ( /* OUT*/) 225 SB
448 2542 50 (\);) 50 SB
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 2682 600 (Parameters for gss_modify_cred:) 600 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2785 207 (cred_handle) 207 SB
374 2835 125 (handle ) 149 SB
523 2835 59 (for ) 83 SB
606 2835 194 (credentials ) 218 SB
824 2835 155 (claimed, ) 179 SB
1003 2835 218 (cred_handle ) 243 SB
1246 2835 106 (refers ) 131 SB
1377 2835 43 (to ) 68 SB
1445 2835 52 (an ) 77 SB
1522 2835 237 (authenticated ) 262 SB
1784 2835 174 (principal. ) 199 SB
1983 2835 117 (Supply) 117 SB
374 2885 930 (GSS_C_NO_CREDENTIAL to use default credentials.) 930 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (19) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 20 20
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
374 269 322 (duplicate_cred_req) 322 SB
374 319 1117 (TRUE for a variant credential set, FALSE => modify the original.) 1117 SB
374 419 296 (commit_cred_req) 296 SB
374 469 1421 (TRUE for immediate attribute acquisition, FALSE => deferred attribute acquisition.) 1421 SB
374 569 489 (required_privilege_attributes) 489 SB
374 619 30 (a ) 33 SB
407 619 57 (set ) 61 SB
468 619 44 (of ) 48 SB
516 619 130 (\(typed\) ) 134 SB
650 619 160 (privilege ) 164 SB
814 619 152 (attribute ) 156 SB
970 619 128 (values. ) 132 SB
1102 619 81 (One ) 85 SB
1187 619 44 (of ) 48 SB
1235 619 97 (these ) 101 SB
1336 619 82 (may ) 86 SB
1422 619 49 (be ) 53 SB
1475 619 30 (a ) 34 SB
1509 619 168 (rolename ) 172 SB
1681 619 114 (which ) 118 SB
1799 619 39 (is ) 43 SB
1842 619 52 (an ) 56 SB
1898 619 152 (attribute ) 156 SB
2054 619 46 (set) 46 SB
374 669 166 (reference ) 167 SB
541 669 114 (which ) 115 SB
656 669 39 (is ) 40 SB
696 669 87 (used ) 88 SB
784 669 43 (to ) 44 SB
828 669 105 (select ) 106 SB
934 669 30 (a ) 31 SB
965 669 11 ( ) 12 SB
977 669 57 (set ) 58 SB
1035 669 44 (of ) 45 SB
1080 669 168 (attributes ) 170 SB
1250 669 25 (- ) 27 SB
1277 669 114 (which ) 116 SB
1393 669 70 (can ) 72 SB
1465 669 135 (include ) 137 SB
1602 669 160 (privilege ) 162 SB
1764 669 73 (and ) 75 SB
1839 669 108 (target ) 110 SB
1949 669 87 (ones ) 89 SB
2038 669 62 (and) 62 SB
374 719 78 (also ) 156 SB
530 719 92 (PAC ) 170 SB
700 719 157 (controls. ) 235 SB
935 719 57 (To ) 135 SB
1070 719 132 (request ) 210 SB
1280 719 127 (default ) 206 SB
1486 719 160 (privilege ) 239 SB
1725 719 179 (attributes, ) 258 SB
1983 719 117 (specify) 117 SB
374 769 614 (GSS_C_NULL_ATTRIBUTE_SET.) 614 SB
374 869 399 (required_target_control) 399 SB
374 919 30 (a ) 34 SB
408 919 57 (set ) 61 SB
469 919 44 (of ) 48 SB
517 919 152 (attribute ) 156 SB
673 919 117 (values ) 121 SB
794 919 59 (for ) 63 SB
857 919 197 (controlling ) 201 SB
1058 919 114 (which ) 118 SB
1176 919 108 (target ) 112 SB
1288 919 215 (applications ) 219 SB
1507 919 70 (can ) 74 SB
1581 919 66 (use ) 71 SB
1652 919 63 (the ) 68 SB
1720 919 176 (privileges ) 181 SB
1901 919 45 (in ) 50 SB
1951 919 63 (the ) 68 SB
2019 919 81 (PAC) 81 SB
374 969 108 (either ) 116 SB
490 969 138 (directly ) 146 SB
636 969 46 (or ) 54 SB
690 969 70 (can ) 78 SB
768 969 143 (forward ) 152 SB
920 969 63 (the ) 72 SB
992 969 92 (PAC ) 101 SB
1093 969 43 (to ) 52 SB
1145 969 114 (others ) 123 SB
1268 969 59 (for ) 68 SB
1336 969 66 (use ) 75 SB
1411 969 50 (by ) 59 SB
1470 969 118 (proxy. ) 127 SB
1597 969 87 (This ) 96 SB
1693 969 70 (can ) 79 SB
1772 969 78 (also ) 87 SB
1859 969 129 (restrict ) 138 SB
1997 969 103 (which) 103 SB
374 1019 163 (initiators ) 172 SB
546 1019 114 (which ) 123 SB
669 1019 70 (can ) 79 SB
748 1019 72 (call ) 81 SB
829 1019 63 (the ) 72 SB
901 1019 108 (target ) 117 SB
1018 1019 210 (application. ) 219 SB
1237 1019 156 (Controls ) 165 SB
1402 1019 53 (on ) 62 SB
1464 1019 178 (credential ) 187 SB
1651 1019 138 (validity ) 147 SB
1798 1019 86 (time ) 96 SB
1894 1019 70 (can ) 80 SB
1974 1019 78 (also ) 88 SB
2062 1019 38 (be) 38 SB
374 1069 1452 (requested. For default target controls specify GSS_C_NULL_TARGET_CONTROLS.) 1452 SB
374 1169 219 (minor_status) 219 SB
374 1219 531 (Mechanism specific status code) 531 SB
374 1319 335 (output_cred_handle) 335 SB
374 1369 296 (gss_modify_cred ) 303 SB
677 1369 161 (produces ) 168 SB
845 1369 30 (a ) 37 SB
882 1369 161 (modified ) 168 SB
1050 1369 134 (version ) 141 SB
1191 1369 44 (of ) 51 SB
1242 1369 63 (the ) 70 SB
1312 1369 99 (input ) 106 SB
1418 1369 194 (credentials ) 201 SB
1619 1369 257 (\(cred_handle\). ) 264 SB
1883 1369 77 (The ) 84 SB
1967 1369 133 (original) 133 SB
374 1419 194 (credentials ) 197 SB
571 1419 63 (are ) 66 SB
637 1419 138 (directly ) 141 SB
778 1419 152 (changed ) 155 SB
933 1419 36 (if ) 40 SB
973 1419 11 ( ) 15 SB
988 1419 333 (duplicate_cred_req ) 337 SB
1325 1419 39 (is ) 43 SB
1368 1419 149 (FALSE, ) 153 SB
1521 1419 173 (otherwise ) 177 SB
1698 1419 63 (the ) 67 SB
1765 1419 335 (output_cred_handle) 335 SB
374 1469 182 (references ) 190 SB
564 1469 30 (a ) 38 SB
602 1469 91 (new, ) 99 SB
701 1469 73 (and ) 82 SB
783 1469 190 (potentially ) 199 SB
982 1469 166 (different, ) 175 SB
1157 1469 89 (copy ) 98 SB
1255 1469 44 (of ) 53 SB
1308 1469 63 (the ) 72 SB
1380 1469 144 (original ) 153 SB
1533 1469 99 (input ) 108 SB
1641 1469 194 (credentials ) 203 SB
1844 1469 128 (\(which ) 137 SB
1981 1469 119 (remain) 119 SB
374 1519 981 (untouched\). gss_release_cred can be used when the caller ) 982 SB
1356 1519 39 (is ) 40 SB
1396 1519 147 (finished ) 148 SB
1544 1519 86 (with ) 87 SB
1631 1519 71 (any ) 72 SB
1703 1519 80 (new ) 81 SB
1784 1519 194 (credentials ) 195 SB
1979 1519 121 (created) 121 SB
374 1569 206 (by this  call.) 206 SB
374 1669 449 (actual_privilege_attributes) 449 SB
374 1719 1273 (a set of \(typed\) privilege attribute values referred to by  output_cred_handle) 1273 SB
374 1819 375 (actual_target_controls) 375 SB
374 1869 30 (a ) 37 SB
411 1869 57 (set ) 64 SB
475 1869 44 (of ) 51 SB
526 1869 152 (attribute ) 159 SB
685 1869 117 (values ) 124 SB
809 1869 59 (for ) 66 SB
875 1869 197 (controlling ) 204 SB
1079 1869 114 (which ) 121 SB
1200 1869 108 (target ) 115 SB
1315 1869 215 (applications ) 222 SB
1537 1869 70 (can ) 77 SB
1614 1869 66 (use ) 73 SB
1687 1869 63 (the ) 70 SB
1757 1869 116 (access ) 123 SB
1880 1869 109 (rights ) 116 SB
1996 1869 45 (in ) 52 SB
2048 1869 52 (the) 52 SB
374 1919 1656 (credentials referred to by output_cred_handle, and/or can forward them to others for use by proxy.) 1656 SB
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 2067 919 (Response from gss_modify_cred \(GSS status code\):) 919 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2170 362 (GSS_S_COMPLETE) 362 SB
374 2220 161 (indicates ) 166 SB
540 2220 76 (that ) 81 SB
621 2220 168 (attributes ) 173 SB
794 2220 70 (can ) 75 SB
869 2220 49 (be ) 54 SB
923 2220 68 (set, ) 73 SB
996 2220 73 (and ) 78 SB
1074 2220 76 (that ) 81 SB
1155 2220 65 (all, ) 71 SB
1226 2220 109 (some, ) 115 SB
1341 2220 46 (or ) 52 SB
1393 2220 93 (none ) 99 SB
1492 2220 44 (of ) 50 SB
1542 2220 63 (the ) 69 SB
1611 2220 171 (requested ) 177 SB
1788 2220 312 (privileges/controls) 312 SB
374 2270 332 (have been returned.) 332 SB
374 2370 333 (GSS_S_NO_CRED) 333 SB
374 2420 664 (GSS_S_DEFECTIVE_CREDENTIAL,) 664 SB
374 2470 623 (GSS_S_CREDENTIALS_EXPIRED) 623 SB
374 2520 369 (GSS_S_BAD_MECH) 369 SB
374 2570 993 (indicates that attributes can't be set for the reason specified) 993 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (20) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Times-Bold
%%+ font Times-Roman
%%Page: 21 21
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 266 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 267 679 (Description of gss_get_delegate_creds) 679 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 370 1391 (This API is for use when traced delegation is supported. It permits the retrieval of ) 1392 SB
1766 370 150 (delegate ) 151 SB
1917 370 183 (credentials) 183 SB
374 420 569 (for use in authorisation decisions.) 569 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 570 844 (Function definition for gss_get_delegate_creds:) 844 SB
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
448 668 1625 (/* get delegates \(if any\) associated with credentials or security) 1625 SB
448 713 250 ( * context) 250 SB
448 758 75 ( */) 75 SB
448 803 800 (OM_uint32 gss_get_delegate_creds) 800 SB
448 848 25 (\() 25 SB
448 893 325 (gss_cred_id_t) 325 SB
892 893 300 (cred_handle,) 300 SB
1780 893 200 (/* IN */) 200 SB
448 938 300 (gss_ctx_id_t) 300 SB
892 938 375 (context_handle,) 375 SB
1780 938 200 (/* IN */) 200 SB
448 983 250 (OM_uint32*) 250 SB
892 983 325 (minor_status,) 325 SB
1780 983 200 (/* OUT*/) 200 SB
448 1028 350 (gss_cred_list*) 350 SB
892 1028 250 (delegates,) 250 SB
1780 1028 200 (/* OUT*/) 200 SB
448 1073 50 (\);) 50 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 1170 710 (Parameters for gss_get_delegate_creds:) 710 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1271 207 (cred_handle) 207 SB
374 1321 41 (A ) 47 SB
421 1321 124 (handle ) 130 SB
551 1321 44 (to ) 50 SB
601 1321 146 (claimed ) 152 SB
753 1321 206 (credentials, ) 212 SB
965 1321 218 (cred_handle ) 224 SB
1189 1321 107 (refers ) 114 SB
1303 1321 44 (to ) 51 SB
1354 1321 51 (an ) 58 SB
1412 1321 238 (authenticated ) 245 SB
1657 1321 173 (principal. ) 180 SB
1837 1321 86 (This ) 93 SB
1930 1321 170 (parameter) 170 SB
374 1371 93 (must ) 103 SB
477 1371 51 (be ) 62 SB
539 1371 154 (supplied ) 165 SB
704 1371 37 (if ) 48 SB
752 1371 270 (context_handle ) 281 SB
1033 1371 39 (is ) 50 SB
1083 1371 65 (not ) 76 SB
1159 1371 165 (supplied. ) 176 SB
1335 1371 130 (Supply ) 141 SB
1476 1371 502 (GSS_C_NO_CREDENTIAL ) 513 SB
1989 1371 44 (to ) 55 SB
2044 1371 56 (use) 56 SB
374 1421 324 (default credentials.) 324 SB
374 1521 259 (context_handle) 259 SB
374 1571 1005 (GSS-API security context handle. context_handle refers to ) 1006 SB
1380 1571 51 (an ) 52 SB
1432 1571 199 (established ) 200 SB
1632 1571 210 (association. ) 211 SB
1843 1571 86 (This ) 87 SB
1930 1571 170 (parameter) 170 SB
374 1621 93 (must ) 95 SB
469 1621 51 (be ) 53 SB
522 1621 154 (supplied ) 156 SB
678 1621 37 (if ) 40 SB
718 1621 11 ( ) 14 SB
732 1621 218 (cred_handle ) 221 SB
953 1621 39 (is ) 42 SB
995 1621 65 (not ) 68 SB
1063 1621 154 (supplied ) 157 SB
1220 1621 78 (\(i.e. ) 81 SB
1301 1621 218 (cred_handle ) 221 SB
1522 1621 59 (== ) 62 SB
1584 1621 516 (GSS_C_NO_CREDENTIAL\).) 516 SB
374 1671 195 (Otherwise, ) 225 SB
599 1671 78 (\(i.e. ) 108 SB
707 1671 218 (cred_handle ) 248 SB
955 1671 49 (!= ) 79 SB
1034 1671 527 (GSS_C_NO_CREDENTIAL\), ) 557 SB
1591 1671 270 (context_handle ) 300 SB
1891 1671 39 (is ) 69 SB
1960 1671 140 (ignored.) 140 SB
374 1721 119 (\(Note: ) 126 SB
500 1721 46 (as ) 53 SB
553 1721 60 (for ) 67 SB
620 1721 327 (gss_get_attributes, ) 334 SB
954 1721 35 (it ) 42 SB
996 1721 39 (is ) 46 SB
1042 1721 160 (typically ) 168 SB
1210 1721 86 (only ) 94 SB
1304 1721 175 (necessary ) 183 SB
1487 1721 44 (to ) 52 SB
1539 1721 67 (use ) 75 SB
1614 1721 30 (a ) 38 SB
1652 1721 270 (context_handle ) 278 SB
1930 1721 170 (parameter) 170 SB
374 1771 110 (rather ) 113 SB
487 1771 84 (than ) 87 SB
574 1771 218 (cred_handle ) 221 SB
795 1771 60 (for ) 63 SB
858 1771 63 (the ) 67 SB
925 1771 84 (case ) 88 SB
1013 1771 102 (when ) 106 SB
1119 1771 30 (a ) 34 SB
1153 1771 145 (security ) 149 SB
1302 1771 136 (context ) 140 SB
1442 1771 39 (is ) 43 SB
1485 1771 139 (emitted ) 143 SB
1628 1771 53 (by ) 57 SB
1685 1771 415 (gss_accept_sec_context,) 415 SB
374 1821 1012 (but not with an accompanying set of delegated credentials\).) 1012 SB
374 2021 218 (minor_status) 218 SB
374 2071 538 (Mechanism specific status code) 538 SB
374 2171 158 (delegates) 158 SB
374 2221 169 (delegates ) 173 SB
547 2221 152 (contains ) 156 SB
703 2221 51 (an ) 55 SB
758 2221 140 (ordered ) 144 SB
902 2221 63 (list ) 68 SB
970 2221 46 (of ) 51 SB
1021 2221 153 (delegate ) 158 SB
1179 2221 195 (credentials ) 200 SB
1379 2221 60 (for ) 65 SB
1444 2221 89 (each ) 94 SB
1538 2221 46 (of ) 51 SB
1589 2221 63 (the ) 68 SB
1657 2221 224 (intermediate ) 229 SB
1886 2221 169 (delegates ) 174 SB
2060 2221 40 (\(if) 40 SB
374 2271 86 (any\) ) 89 SB
463 2271 152 (between ) 155 SB
618 2271 63 (the ) 66 SB
684 2271 165 (initiating ) 168 SB
852 2271 81 (user ) 84 SB
936 2271 72 (and ) 75 SB
1011 2271 72 (this ) 75 SB
1086 2271 119 (target. ) 122 SB
1208 2271 37 (It ) 40 SB
1248 2271 39 (is ) 42 SB
1290 2271 162 (expected ) 165 SB
1455 2271 75 (that ) 78 SB
1533 2271 63 (the ) 66 SB
1599 2271 131 (normal ) 134 SB
1733 2271 67 (use ) 70 SB
1803 2271 60 (for ) 63 SB
1866 2271 88 (such ) 92 SB
1958 2271 142 (delegate) 142 SB
374 2321 195 (credentials ) 196 SB
570 2321 116 (would ) 117 SB
687 2321 129 (merely ) 130 SB
817 2321 51 (be ) 52 SB
869 2321 185 (inspection ) 186 SB
1055 2321 63 (via ) 64 SB
1119 2321 316 (gss_get_attributes ) 317 SB
1436 2321 46 (as ) 48 SB
1484 2321 93 (most ) 95 SB
1579 2321 125 (known ) 127 SB
1706 2321 220 (mechanisms ) 222 SB
1928 2321 116 (would ) 118 SB
2046 2321 54 (not) 54 SB
374 2371 122 (permit ) 124 SB
498 2371 88 (such ) 90 SB
588 2371 153 (delegate ) 155 SB
743 2371 195 (credentials ) 197 SB
940 2371 44 (to ) 46 SB
986 2371 51 (be ) 53 SB
1039 2371 88 (used ) 90 SB
1129 2371 60 (for ) 62 SB
1191 2371 165 (initiating ) 167 SB
1358 2371 126 (further ) 128 SB
1486 2371 145 (security ) 147 SB
1633 2371 163 (contexts. ) 165 SB
1798 2371 93 (Note ) 95 SB
1893 2371 75 (that ) 77 SB
1970 2371 35 (it ) 37 SB
2007 2371 39 (is ) 41 SB
2048 2371 52 (the) 52 SB
374 2421 130 (caller's ) 140 SB
514 2421 241 (responsibility ) 251 SB
765 2421 44 (to ) 54 SB
819 2421 77 (free ) 88 SB
907 2421 72 (any ) 83 SB
990 2421 153 (delegate ) 164 SB
1154 2421 195 (credentials ) 206 SB
1360 2421 152 (returned ) 163 SB
1523 2421 93 (from ) 104 SB
1627 2421 410 (gss_get_delegate_creds ) 421 SB
2048 2421 52 (via) 52 SB
374 2471 297 (gss_release_cred.) 297 SB
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 2618 1018 (Response from gss_get_delegate_creds \(GSS status code\)) 1018 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 2721 362 (GSS_S_COMPLETE) 362 SB
374 2771 1226 (indicates that the delegates can be got, and that delegates were retrieved.) 1226 SB
374 2871 756 (Failure results in a mechanism-specific error) 756 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (21) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 22 22
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 266 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 267 628 (Description of gss_compound_cred) 628 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 370 87 (This ) 94 SB
468 370 78 (API ) 85 SB
553 370 39 (is ) 46 SB
599 370 87 (used ) 95 SB
694 370 43 (to ) 51 SB
745 370 187 (compound ) 195 SB
940 370 205 (credentials. ) 213 SB
1153 370 37 (It ) 45 SB
1198 370 39 (is ) 47 SB
1245 370 112 (useful ) 120 SB
1365 370 102 (when ) 110 SB
1475 370 114 (traced ) 122 SB
1597 370 186 (delegation ) 194 SB
1791 370 39 (is ) 47 SB
1838 370 176 (supported ) 184 SB
2022 370 46 (as ) 54 SB
2076 370 24 (it) 24 SB
374 420 1531 (permits a server to combine a specific set of delegate credentials with a client's credentials.) 1531 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 570 789 (Function definition for gss_compound_cred:) 789 SB
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
448 668 800 (/* combine specified credentials) 800 SB
448 713 75 ( */) 75 SB
448 758 675 (OM_uint32 gss_compound_cred) 675 SB
448 803 25 (\() 25 SB
448 848 325 (gss_cred_id_t) 325 SB
892 848 350 (cred_handle_1,) 350 SB
1780 848 200 (/* IN */) 200 SB
448 893 325 (gss_cred_id_t) 325 SB
892 893 350 (cred_handle_2,) 350 SB
1780 893 200 (/* IN */) 200 SB
448 938 325 (gss_cred_id_t) 325 SB
892 938 400 (cred_handle_new,) 400 SB
1780 938 200 (/* OUT*/) 200 SB
448 983 250 (OM_uint32*) 250 SB
892 983 300 (minor_status) 300 SB
1780 983 200 (/* OUT*/) 200 SB
448 1028 50 (\);) 50 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 1125 655 (Parameters for gss_compound_cred:) 655 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1226 249 (cred_handle_1) 249 SB
374 1276 1381 (A handle to claimed credentials, cred_handle refers to an authenticated principal.) 1381 SB
374 1376 249 (cred_handle_2) 249 SB
374 1426 1381 (A handle to claimed credentials, cred_handle refers to an authenticated principal.) 1381 SB
374 1526 298 (cred_handle_new) 298 SB
374 1576 716 (A handle to a compound set of credentials) 716 SB
374 1676 218 (minor_status) 218 SB
374 1726 538 (Mechanism specific status code) 538 SB
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 1873 1018 (Response from gss_get_delegate_creds \(GSS status code\)) 1018 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1976 362 (GSS_S_COMPLETE) 362 SB
374 2026 800 (indicates that the credentials were compounded) 800 SB
374 2126 756 (Failure results in a mechanism-specific error) 756 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (22) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 23 23
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 266 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 267 636 (Description of gss_set_default_cred) 636 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 370 1456 (This API permits a user to indicate which credential is to be interpreted as the default.) 1456 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 520 800 (Function definition for gss_set_default_cred:) 800 SB
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
448 618 750 (/* set default for credentials) 750 SB
448 663 75 ( */) 75 SB
448 708 750 (OM_uint32 gss_set_default_cred) 750 SB
448 753 25 (\() 25 SB
448 798 325 (gss_cred_id_t) 325 SB
892 798 300 (cred_handle,) 300 SB
1780 798 200 (/* IN */) 200 SB
448 843 250 (OM_uint32*) 250 SB
892 843 325 (minor_status,) 325 SB
1780 843 200 (/* OUT*/) 200 SB
448 888 50 (\);) 50 SB
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 985 666 (Parameters for gss_set_default_cred:) 666 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1086 207 (cred_handle) 207 SB
374 1136 202 (conditional ) 205 SB
579 1136 124 (handle ) 127 SB
706 1136 60 (for ) 63 SB
769 1136 195 (credentials ) 198 SB
967 1136 157 (claimed. ) 160 SB
1127 1136 218 (cred_handle ) 221 SB
1348 1136 107 (refers ) 111 SB
1459 1136 44 (to ) 48 SB
1507 1136 51 (an ) 55 SB
1562 1136 238 (authenticated ) 242 SB
1804 1136 173 (principal. ) 177 SB
1981 1136 119 (Supply) 119 SB
374 1186 502 (GSS_C_NO_CREDENTIAL ) 507 SB
881 1186 44 (to ) 49 SB
930 1186 67 (use ) 72 SB
1002 1186 129 (default ) 134 SB
1136 1186 195 (credentials ) 200 SB
1336 1186 128 (\(which ) 133 SB
1469 1186 116 (would ) 122 SB
1591 1186 103 (mean ) 109 SB
1700 1186 75 (that ) 81 SB
1781 1186 72 (this ) 78 SB
1859 1186 73 (call ) 79 SB
1938 1186 116 (would ) 122 SB
2060 1186 40 (be) 40 SB
374 1236 274 (non-functional\).) 274 SB
374 1336 218 (minor_status) 218 SB
374 1386 538 (Mechanism specific status code) 538 SB
32 0 0 42 42 0 0 0 41 /Times-Bold /font29 ANSIFont font
374 1533 975 (Response from gss_set_default_cred \(GSS status code\)) 975 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
374 1636 362 (GSS_S_COMPLETE) 362 SB
374 1686 1167 (indicates that the default can be set, and that the default has been set.) 1167 SB
374 1786 333 (GSS_S_NO_CRED) 333 SB
374 1836 664 (GSS_S_DEFECTIVE_CREDENTIAL,) 664 SB
374 1886 623 (GSS_S_CREDENTIALS_EXPIRED) 623 SB
374 1936 1160 (indicates that a default credential can't be set for the reason specified) 1160 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (23) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 24 24
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 266 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 39 /Times-Bold /font29 ANSIFont font
374 269 559 (Extended GSS-API Data Types) 559 SB
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
448 367 400 (typedef struct {) 400 SB
596 412 275 (gss_type_en) 275 SB
1040 412 175 (id_type) 175 SB
596 457 225 (gss_value) 225 SB
1040 457 250 (id_value;}) 250 SB
596 502 175 (gss_id;) 175 SB
448 637 325 (typedef enum{) 325 SB
596 682 250 (gss_oid_t,) 250 SB
596 727 300 (gss_integer,) 300 SB
596 772 275 (gss_string,) 275 SB
596 817 225 (gss_uuid,) 225 SB
596 862 275 (gss_buffer}) 275 SB
596 907 300 (gss_type_en;) 300 SB
448 1042 325 (struct union{) 325 SB
596 1087 175 (gss_OID) 175 SB
1040 1087 100 (OID;) 100 SB
596 1132 250 (OM_uint32*) 250 SB
892 1132 200 (integer;) 200 SB
596 1177 125 (char*) 125 SB
1040 1177 175 (string;) 175 SB
596 1222 175 (uuid_t*) 175 SB
1040 1222 125 (uuid;) 125 SB
596 1267 300 (gss_buffer_t) 300 SB
1040 1267 200 (buffer;}) 200 SB
596 1312 250 (gss_value;) 250 SB
448 1447 400 (typedef struct {) 400 SB
596 1492 225 (OM_uint32) 225 SB
1040 1492 275 (cred_count;) 275 SB
596 1537 350 (gss_cred_id_t*) 350 SB
1040 1537 275 (cred_list;}) 275 SB
596 1582 350 (gss_cred_list;) 350 SB
448 1717 400 (typedef struct {) 400 SB
596 1762 225 (OM_uint32) 225 SB
1040 1762 300 (value_count;) 300 SB
596 1807 250 (gss_value*) 250 SB
1040 1807 300 (value_list;}) 300 SB
596 1852 375 (gss_value_list;) 375 SB
448 1987 875 (typedef struct gss_attribute_desc {) 875 SB
596 2032 225 (OM_uint32) 225 SB
1188 2032 475 (validity_indicator;) 475 SB
596 2077 150 (gss_id) 150 SB
1188 2077 375 (attribute_type;) 375 SB
596 2122 150 (gss_id) 150 SB
1188 2122 425 (policy_authority;) 425 SB
596 2167 275 (gss_type_en) 275 SB
1188 2167 325 (value_syntax;) 325 SB
596 2212 225 (OM_uint32) 225 SB
1188 2212 325 (values_count;) 325 SB
596 2257 375 (gss_value_list*) 375 SB
1188 2257 325 (values_list;}) 325 SB
596 2302 350 (gss_attribute;) 350 SB
448 2437 775 (typedef struct gss_id_set_desc{) 775 SB
596 2482 225 (OM_uint32) 225 SB
1040 2482 225 (id_count;) 225 SB
596 2527 175 (gss_id*) 175 SB
1040 2527 125 (ids;}) 125 SB
596 2572 275 (gss_id_set;) 275 SB
448 2707 950 (typedef struct gss_attribute_set_desc{) 950 SB
596 2752 225 (OM_uint32) 225 SB
1040 2752 400 (attribute_count;) 400 SB
596 2797 350 (gss_attribute*) 350 SB
1040 2797 300 (attributes;}) 300 SB
596 2842 450 (gss_attribute_set;) 450 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (24) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Page: 25 25
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
448 312 1525 (/* The access_flags is used to specify whether the privileges) 1525 SB
448 357 1450 ( * in the associated credentials apply to direct access or) 1450 SB
448 402 1575 ( * delegation.  A server may own multiple accessor and delegate) 1575 SB
448 447 1625 ( * credentials. A server's delegate credentials are required when) 1625 SB
448 492 1625 ( * a server initiates an outgoing security context on behalf on a) 1625 SB
448 537 1350 ( * client whose credentials specify traced delegation.) 1350 SB
448 582 75 ( */) 75 SB
448 627 1075 (typedef struct gss_priv_attribute_set_desc{) 1075 SB
596 672 225 (OM_uint32) 225 SB
1040 672 325 (access_flags;) 325 SB
744 717 1250 (/* combination of one or more of the following: */) 1250 SB
744 762 475 (/* - is accessor */) 475 SB
744 807 475 (/* - is delegate */) 475 SB
596 852 450 (gss_attribute_set*) 450 SB
1188 852 425 (priv_attributes};) 425 SB
596 897 575 (gss_priv_attribute_set;) 575 SB
448 1032 400 (typedef struct {) 400 SB
596 1077 225 (OM_uint32) 225 SB
1040 1077 275 (time_count;) 275 SB
596 1122 175 (time_t*) 175 SB
1040 1122 275 (time_list;}) 275 SB
596 1167 350 (gss_time_list;) 350 SB
448 1302 375 (typedef struct ) 375 SB
892 1302 25 ({) 25 SB
596 1347 225 (OM_uint32) 225 SB
1188 1347 350 (control_count;) 350 SB
596 1392 325 (gss_controls*) 325 SB
1188 1392 350 (control_list;}) 350 SB
596 1437 400 (gss_control_set;) 400 SB
448 1572 825 (typedef struct gss_controls_desc{) 825 SB
596 1617 250 (OM_uint32*) 250 SB
1040 1617 275 (check_back;) 275 SB
596 1662 250 (OM_uint32*) 250 SB
1040 1662 325 (usage_count;}) 325 SB
596 1707 325 (gss_controls;) 325 SB
448 1842 875 (typedef struct target_control_desc{) 875 SB
596 1887 450 (gss_attribute_set*) 450 SB
1188 1887 450 (target_attributes;) 450 SB
596 1932 975 (/* attributes characterising a group of) 975 SB
596 1977 250 ( * targets) 250 SB
596 2022 825 ( * If GSS_C_NULL_ATTRIBUTE_SET is) 825 SB
596 2067 1050 ( * specified then all targets are included) 1050 SB
596 2112 75 ( */) 75 SB
448 2202 75 (   ) 75 SB
596 2202 400 (gss_control_set*) 400 SB
1188 2202 450 (controls_required;) 450 SB
596 2247 700 (/* controls to be applied */) 700 SB
596 2337 450 (gss_attribute_set*) 450 SB
1188 2337 550 (optional_restrictions;) 550 SB
596 2382 450 (gss_attribute_set*) 450 SB
1188 2382 550 (required_restrictions;) 550 SB
596 2427 1500 (/* restrictions to be applied for the specified target\(s\) */) 1500 SB
596 2517 450 (gss_attribute_set*) 450 SB
1188 2517 525 (requested_attributes;) 525 SB
596 2562 575 (/* attributes requested) 575 SB
448 2607 25 ( ) 25 SB
596 2607 1350 ( * \(which may qualify the privileges for the specified) 1350 SB
596 2652 350 ( * target\(s\) \)) 350 SB
596 2697 75 ( */) 75 SB
596 2787 225 (OM_uint32) 225 SB
1040 2787 425 (delegation_flags;) 425 SB
596 2832 1400 (/* sensible combinations of the following flags describe) 1400 SB
448 2877 75 (   ) 75 SB
596 2877 1350 ( * "target_attributes". The following are supported :-) 1350 SB
596 2922 225 ( * - none) 225 SB
1188 2922 50 (  ) 50 SB
1484 2922 575 (no delegation permitted) 575 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (25) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Times-Roman
%%Page: 26 26
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 42 42 0 0 0 33 /Courier /font0 ANSIFont font
596 267 775 ( * - can_be_delegate_and_target) 775 SB
1484 267 475 (may act as delegate) 475 SB
596 312 50 ( *) 50 SB
1484 312 350 ( and/or target) 350 SB
596 357 475 ( * - trace_required) 475 SB
1484 357 450 (delegation must be) 450 SB
596 402 50 ( *) 50 SB
1484 402 150 (traced) 150 SB
596 447 775 ( * - trace_degrade_to_initiator) 775 SB
1484 447 600 (if trace unacceptable to) 600 SB
596 492 50 ( *) 50 SB
1484 492 550 (target then use simple) 550 SB
596 537 50 ( *) 50 SB
1484 537 250 (delegation) 250 SB
596 582 775 ( * - trace_degrade_to_requester) 775 SB
1484 582 600 (if trace unacceptable to) 600 SB
596 627 50 ( *) 50 SB
1484 627 375 (target then use) 375 SB
1484 672 600 (delegate's access rights) 600 SB
596 717 75 ( */) 75 SB
596 762 500 (}gss_target_control;) 500 SB
448 897 400 (typedef struct {) 400 SB
596 942 325 (gss_time_list) 325 SB
1188 942 475 (valid_time_periods;) 475 SB
596 987 225 (OM_uint32) 225 SB
1188 987 525 (target_control_count;) 525 SB
596 1032 475 (gss_target_control*) 475 SB
1188 1032 400 (target_controls;) 400 SB
596 1077 25 (}) 25 SB
596 1122 575 (gss_target_control_set;) 575 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (26) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Courier
%%+ font Times-Roman
%%Page: 27 27
%%PageResources: (atend)
SS
0 0 25 11 798 1100 300 SM
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
0 0 0 fC
1052 119 327 (Extended GSS-API) 327 SB
255 255 255 fC
/fm 256 def
1811 15 294 167 B
1 F
n
0 0 0 fC
1811 2 294 183 B
1 F
n
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
300 319 42 (A) 42 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
342 330 215 (PPENDIX ) 238 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
580 319 57 (D ) 80 SB
660 319 34 (- ) 57 SB
717 319 42 (R) 42 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
759 330 332 (ELATIONSHIP ) 356 SB
1115 330 75 (OF ) 99 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1214 319 142 (DCE-) 142 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1356 330 225 (SPECIFIC ) 249 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1605 319 101 (API) 101 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
1706 330 38 (S ) 62 SB
1768 330 79 (TO ) 103 SB
32 0 0 58 58 0 0 0 54 /Times-Bold /font29 ANSIFont font
1871 319 229 (GSS-API) 229 SB
300 388 39 (E) 39 SB
32 0 0 46 46 0 0 0 43 /Times-Bold /font29 ANSIFont font
339 399 268 (XTENSIONS) 268 SB
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
300 532 136 (Section ) 141 SB
441 532 32 (6 ) 37 SB
478 532 44 (of ) 49 SB
527 532 152 ([RFC-3] ) 157 SB
684 532 224 ("CHANGES ) 229 SB
913 532 67 (TO ) 72 SB
985 532 92 (THE ) 97 SB
1082 532 326 (PROGRAMMING ) 331 SB
1413 532 176 (MODEL" ) 181 SB
1594 532 149 (presents ) 154 SB
1748 532 30 (a ) 36 SB
1784 532 57 (set ) 63 SB
1847 532 44 (of ) 50 SB
1897 532 94 (APIs ) 100 SB
1997 532 103 (which) 103 SB
300 582 120 (enable ) 128 SB
428 582 199 (application ) 207 SB
635 582 237 (programmers ) 245 SB
880 582 43 (to ) 51 SB
931 582 116 (access ) 124 SB
1055 582 63 (the ) 71 SB
1126 582 158 (expected ) 166 SB
1292 582 186 (delegation ) 194 SB
1486 582 167 (functions ) 175 SB
1661 582 114 (which ) 122 SB
1783 582 76 (will ) 84 SB
1867 582 49 (be ) 57 SB
1924 582 133 (present ) 142 SB
2066 582 34 (in) 34 SB
300 632 709 (DCE1.1. These APIs are listed as follows:) 709 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 728 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 732 486 (sec_login_enable_delegation) 486 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 828 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 832 495 (sec_login_disable_delegation) 495 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 928 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 932 468 (sec_login_become_delegate) 468 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1028 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1032 374 (sec_cred_get_initiator) 374 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1128 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1132 377 (sec_cred_get_delegate) 377 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1228 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1232 585 (sec_cred_get_optional_restrictions) 585 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1328 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1332 588 (sec_cred_get_required_restrictions) 588 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1428 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1432 553 (sec_login_enable_impersonation) 553 SB
300 1632 77 (The ) 82 SB
382 1632 152 ([RFC-3] ) 157 SB
539 1632 94 (APIs ) 99 SB
638 1632 59 (for ) 64 SB
702 1632 63 (the ) 69 SB
771 1632 116 (client, ) 122 SB
893 1632 63 (are ) 69 SB
962 1632 180 (\(partially\) ) 186 SB
1148 1632 196 (superseded ) 202 SB
1350 1632 50 (by ) 56 SB
1406 1632 63 (the ) 69 SB
1475 1632 176 ([RFC-3+] ) 182 SB
1657 1632 105 (paper ) 111 SB
1768 1632 114 (which ) 120 SB
1888 1632 63 (are ) 69 SB
1957 1632 102 (listed ) 108 SB
2065 1632 35 (as) 35 SB
300 1682 134 (follows:) 134 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1778 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1782 284 (become_initiator) 284 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1878 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1882 287 (become_delegate) 287 SB
32 0 0 42 42 0 0 0 42 /Symbol font
gs 319 3231 0 0 CB
300 1978 19 (\267) 19 SB
gr
32 0 0 42 42 0 0 0 38 /Times-Roman /font32 ANSIFont font
375 1982 371 (become_impersonator) 371 SB
300 2182 47 (In ) 59 SB
359 2182 147 (general, ) 159 SB
518 2182 63 (the ) 75 SB
593 2182 108 (above ) 120 SB
713 2182 94 (APIs ) 106 SB
819 2182 63 (are ) 75 SB
894 2182 367 (environment-specific ) 379 SB
1273 2182 158 (\(through ) 170 SB
1443 2182 90 (their ) 102 SB
1545 2182 66 (use ) 78 SB
1623 2182 44 (of ) 56 SB
1679 2182 237 (DCE-specific ) 250 SB
1929 2182 122 (types\), ) 135 SB
2064 2182 36 (so) 36 SB
300 2232 215 (applications ) 221 SB
521 2232 131 (written ) 137 SB
658 2232 43 (to ) 49 SB
707 2232 97 (these ) 103 SB
810 2232 95 (DCE ) 101 SB
911 2232 94 (APIs ) 100 SB
1011 2232 103 (could ) 110 SB
1121 2232 65 (not ) 72 SB
1193 2232 151 (function ) 158 SB
1351 2232 45 (in ) 52 SB
1403 2232 93 (\(say\) ) 100 SB
1503 2232 63 (the ) 70 SB
1573 2232 77 (Sun ) 84 SB
1657 2232 99 (ONC ) 106 SB
1763 2232 236 (environment. ) 243 SB
2006 2232 11 ( ) 18 SB
2024 2232 76 (This) 76 SB
300 2282 208 (dependence ) 215 SB
515 2282 82 (may ) 89 SB
604 2282 49 (be ) 56 SB
660 2282 204 (appropriate ) 211 SB
871 2282 59 (for ) 66 SB
937 2282 215 (applications ) 222 SB
1159 2282 114 (which ) 121 SB
1280 2282 75 (rely ) 82 SB
1362 2282 53 (on ) 60 SB
1422 2282 98 (other ) 106 SB
1528 2282 95 (DCE ) 103 SB
1631 2282 155 (services, ) 163 SB
1794 2282 64 (but ) 72 SB
1866 2282 39 (is ) 47 SB
1913 2282 65 (not ) 73 SB
1986 2282 114 (always) 114 SB
300 2332 1629 (desirable for applications written for portability across a wide range of distributed environments.) 1629 SB
300 2532 47 (In ) 52 SB
352 2532 161 (addition, ) 166 SB
518 2532 63 (the ) 68 SB
586 2532 108 (above ) 113 SB
699 2532 95 (DCE ) 100 SB
799 2532 94 (APIs ) 99 SB
898 2532 70 (can ) 75 SB
973 2532 49 (be ) 54 SB
1027 2532 204 (constructed ) 209 SB
1236 2532 103 (using ) 108 SB
1344 2532 63 (the ) 68 SB
1412 2532 170 (Extended ) 175 SB
1587 2532 144 (Generic ) 150 SB
1737 2532 149 (Security ) 155 SB
1892 2532 135 (Service ) 141 SB
2033 2532 67 (API) 67 SB
300 2582 373 (together with parts of ) 374 SB
674 2582 63 (the ) 64 SB
738 2582 213 ([GSS-DCE] ) 214 SB
952 2582 89 (API. ) 90 SB
1042 2582 87 (This ) 88 SB
1130 2582 39 (is ) 40 SB
1170 2582 141 (because ) 142 SB
1312 2582 52 (an ) 53 SB
1365 2582 277 (implementation ) 278 SB
1643 2582 114 (which ) 115 SB
1758 2582 153 (supports ) 154 SB
1912 2582 63 (the ) 64 SB
1976 2582 124 (generic) 124 SB
300 2632 1232 (API can also readily support the less generic one \(though not vice versa\).) 1232 SB
300 3069 631 (Pre-publication draft  -  05 May 1993) 631 SB
1096 3069 415 (Ses/Paper/010  -  Issue 3) 415 SB
1870 3069 92 (Page ) 92 SB
1962 3069 42 (27) 42 SB
2004 3069 97 ( of 27) 97 SB
255 255 255 fC
1811 3 294 3063 B
1 F
n
0 0 0 fC
1811 2 294 3060 B
1 F
n
1 #C
statusdict begin /manualfeed false store end
EJ RS
%%PageTrailer
%%PageResources: font Symbol
%%+ font Times-Bold
%%+ font Times-Roman
%%Trailer
SVDoc restore
end
%%Pages: 27
% TrueType font name key:
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT310000 = 
%    MSTT31c1c8 = 18a7DTimes New RomanF00000032000001900000
%    MSTT31c1d5 = 18a7DTimes New RomanF00000032000002bc0000
%    MSTT31c1e2 = 18a7DTimes New RomanF0000003a000002bc0000
%    MSTT31c1ef = 18a7DTimes New RomanF0000002e000002bc0000
%    MSTT31c1fc = 18a7DTimes New RomanF00000028000002bc0000
%    MSTT31c209 = 18a7DTimes New RomanF00000021000001900000
%    MSTT31c216 = 18a7DTimes New RomanF0000002a000001900000
%    MSTT31c223 = 18a7DTimes New RomanF00000032000002bc0001
%    MSTT31c230 = 18a7DTimes New RomanF00000021000001900001
%    MSTT31c23d = 18a7DTimes New RomanF0000001a000001900000
%    MSTT31c24a = 18a7DTimes New RomanF00000021000002bc0000
%    MSTT31c261 = 18a7DTimes New RomanF0000002a000002bc0000
%    MSTT31c26e = 18a7DTimes New RomanF0000002a000001900001
%    MSTT31c27b = 18a7DCourier NewF00000021000001900000
%    MSTT31c287 = 18a7DCourier NewF0000002a000001900000
%%DocumentSuppliedResources: procset Win35Dict 3 1

%%DocumentNeededResources: font Courier
%%+ font Symbol
%%+ font Times-Bold
%%+ font Times-Italic
%%+ font Times-Roman

%%EOF

-- 

============================================================================
      Denis Pinkas, Bull S.A                 E-mail : [email-masked]
      System Design                                               
      7, Rue Ampere                           Phone : (33-1) 69 93 95 75
      91343 MASSY Cedex, France                Fax  : (33-1) 69 93 73 53
============================================================================