The GSSAPI SASL Mechanisms mechanism provides a way for clients to authentication to a LDAP Directory Server using a Kerberos V5 session. Kerberos is a protocol that is commonly used for single sign-on purposes, and provides the option of using integrity and/or confidentiality to protect the communication between the client and the server.

The GSSAPI SASL Mechanism is described in RFCs 2743, RFC 2744 and RFC 4752, and a description of the exchange between the client and the server (as well as with the Kerberos KDC) are beyond the scope of this discussion.

Configuring GSSAPI With Edirectory#

More Information#

There might be more information for this subject on one of the following:

• Authentication Methodologies
• Best Practices for LDAP Security
• DefinitionAuthorizationID
• GSS-SPNEGO
• Glossary Of LDAP And Directory Terminology
• Kerberos
• Quality of Protection
• SASL
• Security Support Provider Interface (SPPI)