authentication
Click on the red underlined text to get to the source
... RPC protocol includes a slot for security parameters (referred to
as an authentication flavor in the RPC specification [RFC1831]) on
...
... every call. The contents of the security parameters are determined
by the type of authentication used by the server and client. A server
...
... by the server and client. A server
may support several different flavors of authentication at once.
Some of the better known flavors are summarized as follows:
...
... The AUTH_NONE flavor provides null authentication, that is, no
authentication information is passed.
...
... AUTH_NONE flavor provides null authentication, that is, no
authentication information is passed.
...
... provides DES-encrypted authentication parameters based on a
network-wide string name, with session keys ...
... AUTH_KERB4 flavor provides DES encrypted authentication
parameters based on a network-wide string name (the name is a
...
...
Using the AUTH_SYS flavor of authentication, the server gets the
client's effective user identifier ...
... user identifier and group
identifier mapping in AUTH_SYS. Also, because the authentication
parameters are encrypted, a malicious user must know another user's
...
... Authentication for NFS Procedures ...
... overhead and certainly no more overhead than the cost
of processing a NULL procedure and returning an authentication
error. Moreover, by sending back an authentication error, the
...
... of processing a NULL procedure and returning an authentication
error. Moreover, by sending back an authentication error, the
server has confirmed the information that the client was
...
... be authenticated with a flavor stronger than AUTH_SYS. This is a
problem because the RPCSEC_GSS ...
... file system from the server. Some NFS server implementations will
not require authentication for these NFS procedures. For NFS
...
... request/response pair
with plain header authentication, message integrity, and message
privacy ...
... security, where M is the number of mechanisms supported, Q
is the average number of QOPs supported for each mechanism, and 3
enumerates authentication, integrity, and privacy.
...
... service. The service will be one of
authentication, integrity, and privacy. Note that integrity ...
... privacy. Note that integrity includes
authentication, and privacy includes integrity. RPCSEC_GSS ...
... Massachusetts Institute of Technology (1998). "Kerberos: The Network Authentication Protocol." The Web site for downloading MIT's implementation of Kerberos ...