[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
CVS gsasl/doc/specification
From: |
gsasl-commit |
Subject: |
CVS gsasl/doc/specification |
Date: |
Fri, 01 Apr 2005 19:23:33 +0200 |
Update of /home/cvs/gsasl/doc/specification
In directory dopio:/tmp/cvs-serv13487
Added Files:
draft-ietf-sasl-gssapi-02.txt
Log Message:
Add.
--- /home/cvs/gsasl/doc/specification/draft-ietf-sasl-gssapi-02.txt
2005/04/01 17:23:33 NONE
+++ /home/cvs/gsasl/doc/specification/draft-ietf-sasl-gssapi-02.txt
2005/04/01 17:23:33 1.1
SASL Working Group A. Melnikov
Internet-Draft Isode
Expires: September 27, 2005 March 29, 2005
SASL GSSAPI mechanisms
draft-ietf-sasl-gssapi-02
Status of this Memo
This document is an Internet-Draft and is subject to all provisions
of section 3 of RFC 3667. By submitting this Internet-Draft, each
author represents that any applicable patent or other IPR claims of
which he or she is aware have been or will be disclosed, and any of
which he or she become aware will be disclosed, in accordance with
RFC 3668.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF), its areas, and its working groups. Note that
other groups may also distribute working documents as
Internet-Drafts.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or obsoleted by other documents at any
time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
The list of current Internet-Drafts can be accessed at
http://www.ietf.org/ietf/1id-abstracts.txt.
The list of Internet-Draft Shadow Directories can be accessed at
http://www.ietf.org/shadow.html.
This Internet-Draft will expire on September 27, 2005.
Copyright Notice
Copyright (C) The Internet Society (2005).
Abstract
The Simple Authentication and Security Layer [SASL] is a method for
adding authentication support to connection-based protocols. This
document describes the method for using the Generic Security Service
Application Program Interface [GSSAPI] in the Simple Authentication
and Security Layer [SASL].
This document replaces section 7.2 of RFC 2222 [SASL], the definition
of the "GSSAPI" SASL mechanism.
Melnikov Expires September 27, 2005 [Page 1]
Internet-Draft SASL GSSAPI mechanisms March 2005
Table of Contents
1. Conventions Used in this Document . . . . . . . . . . . . . . 3
2. Introduction and Overview . . . . . . . . . . . . . . . . . . 4
2.1 Example . . . . . . . . . . . . . . . . . . . . . . . . . 4
3. SPNEGO . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
4. Specification common to all GSSAPI mechanisms . . . . . . . . 6
4.1 Client side of authentication protocol exchange . . . . . 6
4.2 Server side of authentication protocol exchange . . . . . 7
4.3 Security layer . . . . . . . . . . . . . . . . . . . . . . 8
5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 9
6. Security Considerations . . . . . . . . . . . . . . . . . . . 10
7. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 11
8. References . . . . . . . . . . . . . . . . . . . . . . . . . . 12
8.1 Normative References . . . . . . . . . . . . . . . . . . . . 12
8.2 Informative References . . . . . . . . . . . . . . . . . . . 12
Author's Address . . . . . . . . . . . . . . . . . . . . . . . 13
Intellectual Property and Copyright Statements . . . . . . . . 14
Melnikov Expires September 27, 2005 [Page 2]
Internet-Draft SASL GSSAPI mechanisms March 2005
1. Conventions Used in this Document
The key words "MUST", "MUST NOT", "SHOULD", "SHOULD NOT", and "MAY"
in this document are to be interpreted as defined in "Key words for
use in RFCs to Indicate Requirement Levels" [KEYWORDS].
Melnikov Expires September 27, 2005 [Page 3]
Internet-Draft SASL GSSAPI mechanisms March 2005
2. Introduction and Overview
Each and every GSSAPI mechanism used within SASL is implicitly
registered by this specification.
For backwards compatibility with existing implementations of Kerberos
V5 and SPNEGO under SASL, the SASL mechanism name for the Kerberos V5
GSSAPI mechanism [KRB5GSS] is "GSSAPI" and the SASL mechanism for the
SPNEGO GSSAPI mechanism [SPNEGO] is "GSS-SPNEGO". The SASL mechanism
name for any other GSSAPI mechanism is the concatenation of "GSS-"
and the Base32 [BASE-ENCODING] encoding of the first ten bytes of the
MD5 hash [MD5] of the ASN.1 DER encoding [ASN1] of the GSSAPI
mechanism's OID. The Base32 rules on padding characters and
characters outside of the base32 alphabet are not relevant to this
use of Base32.
SASL mechanism names starting with "GSS-" are reserved for SASL
mechanisms which conform to this document.
The specification of all SASL mechanisms conforming to this document
is in the "Specification common to all GSSAPI mechanisms" section of
this document.
The IESG is considered to be the owner of all SASL mechanisms which
conform to this document. This does NOT necessarily imply that the
IESG is considered to be the owner of the underlying GSSAPI
mechanism.
2.1 Example
The OID for the SPKM-1 mechanism [SPKM1] is 1.3.6.1.5.5.1. The ASN.1
DER encoding of this OID is 06 06 2b 06 01 05 05 01. The MD5 hash of
the ASN.1 DER encoding is 57 ee 81 82 4e ac 4d b0 e6 50 9f 60 1f 46
8a 30. The Base32 encoding of the first ten bytes of this is
"K7XIDASOVRG3BZSQ". Thus the SASL mechanism name for the SPKM-1
GSSAPI mechanism is "GSS-K7XIDASOVRG3BZSQ".
Melnikov Expires September 27, 2005 [Page 4]
Internet-Draft SASL GSSAPI mechanisms March 2005
3. SPNEGO
Use of the Simple and Protected GSS-API Negotiation Mechanism
[SPNEGO] underneath SASL introduces subtle interoperability problems
and security considerations. To address these, this section places
additional requirements on implementations which support SPNEGO
underneath SASL.
A client which supports, for example, the Kerberos V5 GSSAPI
mechanism only underneath SPNEGO underneath the "GSS-SPNEGO" SASL
mechanism will not interoperate with a server which supports the
Kerberos V5 GSSAPI mechanism only underneath the "GSSAPI" SASL
mechanism.
Since SASL is capable of negotiating amongst GSSAPI mechanisms, the
only reason for a server or client to support the "GSS-SPNEGO"
mechanism is to allow a policy of only using mechanisms below a
certain strength if those mechanism's negotiation is protected. In
such a case, a client or server would only want to negotiate those
weaker mechanisms through SPNEGO. In any case, there is no down-
negotiation security consideration with using the strongest mechanism
and set of options the implementation supports, so for
interoperability that mechanism and set of options MUST be negotiable
without using the "GSS-SPNEGO" mechanism.
If a client's policy is to first prefer GSSAPI mechanism X, then
non-GSSAPI mechanism Y, then GSSAPI mechanism Z, and if a server
supports mechanisms Y and Z but not X, then if the client attempts to
negotiate mechanism X by using the "GSS-SPNEGO" SASL mechanism, it
may end up using mechanism Z when it should have used mechanism Y.
For this reason, implementations MUST exclude from SPNEGO those
GSSAPI mechanisms which are weaker than the strongest non-GSSAPI SASL
mechanism advertised by the server.
Melnikov Expires September 27, 2005 [Page 5]
Internet-Draft SASL GSSAPI mechanisms March 2005
4. Specification common to all GSSAPI mechanisms
Each SASL mechanism which uses a GSSAPI mechanism uses the following
specification.
The implementation MAY set any GSSAPI flags or arguments not
mentioned in this specification as is necessary for the
implementation to enforce its security policy.
4.1 Client side of authentication protocol exchange
The client calls GSS_Init_sec_context, passing in
input_context_handle of 0 (initially), mech_type of the GSSAPI
mechanism for which this SASL mechanism is registered, chan_binding
of NULL, and targ_name equal to output_name from GSS_Import_Name
called with input_name_type of GSS_C_NT_HOSTBASED_SERVICE and
input_name_string of "address@hidden" where "service" is the
service name specified in the protocol's profile, and "hostname" is
the fully qualified host name of the server. If the client will be
requesting a security layer, it MUST also supply to the
GSS_Init_sec_context a mutual_req_flag of TRUE, a sequence_req_flag
of TRUE, and an integ_req_flag of TRUE. If the client will be
requesting a security layer providing confidentiality protection, it
MUST also supply to the GSS_Init_sec_context a conf_req_flag of TRUE.
The client then responds with the resulting output_token. If
GSS_Init_sec_context returns GSS_S_CONTINUE_NEEDED, then the client
should expect the server to issue a token in a subsequent challenge.
The client must pass the token to another call to
GSS_Init_sec_context, repeating the actions in this paragraph.
When GSS_Init_sec_context returns GSS_S_COMPLETE, the client examines
the context to ensure that it provides a level of protection
permitted by the client's security policy. If the context is
acceptable, the client takes the following actions: If the last call
to GSS_Init_sec_context returned an output_token, then the client
responds with the output_token, otherwise the client responds with no
data. The client should then expect the server to issue a token in a
subsequent challenge. The client passes this token to GSS_Unwrap and
interprets the first octet of resulting cleartext as a bit-mask
specifying the security layers supported by the server and the second
through fourth octets as the network byte order maximum size
output_message to send to the server (if the resulting cleartext is
not 4 octets long, the client fails the negotiation). The client
verifies that the server maximum buffer is 0 if the server doesn't
advertise support for any security layer. The client then constructs
data, with the first octet containing the bit-mask specifying the
selected security layer, the second through fourth octets containing
in network byte order the maximum size output_message the client is
Melnikov Expires September 27, 2005 [Page 6]
Internet-Draft SASL GSSAPI mechanisms March 2005
able to receive, and the remaining octets containing the UTF-8 [UTF8]
encoded authorization identity. (Implementation note: the
authorization identity is not terminated with the NUL (%x00)
character). The client passes the data to GSS_Wrap with conf_flag
set to FALSE, and responds with the generated output_message. The
client can then consider the server authenticated.
4.2 Server side of authentication protocol exchange
The server passes the initial client response to
GSS_Accept_sec_context as input_token, setting input_context_handle
to 0 (initially), mech_type of the GSSAPI mechanism for which this
SASL mechanism is registered, chan_binding of NULL, and
acceptor_cred_handle equal to output_cred_handle from
GSS_Acquire_cred called with desired_name equal to output_name from
GSS_Import_name with input_name_type of GSS_C_NT_HOSTBASED_SERVICE
and input_name_string of "address@hidden" where "service" is the
service name specified in the protocol's profile, and "hostname" is
the fully qualified host name of the server. If
GSS_Accept_sec_context returns GSS_S_CONTINUE_NEEDED, the server
returns the generated output_token to the client in challenge and
passes the resulting response to another call to
GSS_Accept_sec_context, repeating the actions in this paragraph.
When GSS_Accept_sec_context returns GSS_S_COMPLETE, the server
examines the context to ensure that it provides a level of protection
permitted by the server's security policy. If the context is
acceptable, the server takes the following actions: If the last call
to GSS_Accept_sec_context returned an output_token, the server
returns it to the client in a challenge and expects a reply from the
client with no data. Whether or not an output_token was returned
(and after receipt of any response from the client to such an
output_token), the server then constructs 4 octets of data, with the
first octet containing a bit-mask specifying the security layers
supported by the server and the second through fourth octets
containing in network byte order the maximum size output_token the
server is able to receive (which MUST be 0 if the server doesn't
support any security layer). The server must then pass the plaintext
to GSS_Wrap with conf_flag set to FALSE and issue the generated
output_message to the client in a challenge. The server must then
pass the resulting response to GSS_Unwrap and interpret the first
octet of resulting cleartext as the bit-mask for the selected
security layer, the second through fourth octets as the network byte
order maximum size output_message to send to the client, and the
remaining octets as the authorization identity. The server verifies
that the client has selected a security layer that was offered, and
that the client maximum buffer is 0 if no security layer was chosen.
The server must verify that the src_name is authorized to
Melnikov Expires September 27, 2005 [Page 7]
Internet-Draft SASL GSSAPI mechanisms March 2005
authenticate as the authorization identity. After these
verifications, the authentication process is complete.
4.3 Security layer
The security layers and their corresponding bit-masks are as follows:
[384 lines skipped]
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- CVS gsasl/doc/specification,
gsasl-commit <=