You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2017/12/01 11:00:35 UTC

svn commit: r1021572 - in /websites/staging/directory/trunk/content: ./ api/user-guide/5.3-sasl-bind.html

Author: buildbot
Date: Fri Dec  1 11:00:34 2017
New Revision: 1021572

Log:
Staging update by buildbot for directory

Modified:
    websites/staging/directory/trunk/content/   (props changed)
    websites/staging/directory/trunk/content/api/user-guide/5.3-sasl-bind.html

Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Fri Dec  1 11:00:34 2017
@@ -1 +1 @@
-1816464
+1816832

Modified: websites/staging/directory/trunk/content/api/user-guide/5.3-sasl-bind.html
==============================================================================
--- websites/staging/directory/trunk/content/api/user-guide/5.3-sasl-bind.html (original)
+++ websites/staging/directory/trunk/content/api/user-guide/5.3-sasl-bind.html Fri Dec  1 11:00:34 2017
@@ -183,10 +183,150 @@
   visibility: hidden;
 }
 h2:hover > .headerlink, h3:hover > .headerlink, h1:hover > .headerlink, h6:hover > .headerlink, h4:hover > .headerlink, h5:hover > .headerlink, dt:hover > .elementid-permalink { visibility: visible }</style>
-<h1 id="53-sasl-bind">5.3 - SASL Bind<a class="headerlink" href="#53-sasl-bind" title="Permanent link">&para;</a></h1>
 <blockquote>
-<p><strong>Note:</strong> Contents for this page will be added soon...</p>
+<p><strong>Note:</strong> Work in progress...</p>
 </blockquote>
+<h1 id="53-sasl-bind">5.3 - SASL Bind<a class="headerlink" href="#53-sasl-bind" title="Permanent link">&para;</a></h1>
+<p><em>SASL</em> is defined by <a href="https://tools.ietf.org/html/rfc4422">RFC 4422</a> which obsoletes <a href="https://tools.ietf.org/html/rfc2222">RFC2222</a>. There are also a few RFCs that are related to <em>SASL</em>, they are listed in the next paragraph.</p>
+<p>In any case, as <em>ApacheDS</em> and the <em>Apache LDAP API</em> are based on <em>Java</em>, we depend on the <em>Java</em> <em>SASL</em> impementation. Typically, this is handled by the <em>SunSASL</em> provider, which only support the following mechanisms, as of Java 8 :</p>
+<ul>
+<li>PLAIN (Client)</li>
+<li>CRAM-MD5 (Client/Server)</li>
+<li>DIGEST-MD5 (Client/Server)</li>
+<li>GSSAPI (Client/Server)</li>
+<li>EXTERNAL (Client)</li>
+</ul>
+<p>Note that in <em>Java 9</em>, those mechanisms are spread in two different providers, the <em>GSSAPI</em> mechanism being handled by the <em>JdkSASL</em> provider.</p>
+<p>We currently don't support any other provider.</p>
+<h2 id="rfcs">RFCs<a class="headerlink" href="#rfcs" title="Permanent link">&para;</a></h2>
+<p>Here are the list of RFCs related to <em>SASL</em>:</p>
+<p><img alt="" src="../../images/icons/information.gif" /> : Informational</p>
+<p><img alt="" src="../../images/icons/lightbulb.gif" /> : Historic</p>
+<p><img alt="" src="../../images/icons/lightbulb_on.gif" /> : Proposed Standard</p>
+<p><img alt="" src="../../images/icons/warning.gif" /> : Experimental</p>
+<p><img alt="" src="../../images/icons/thumbs_up.gif" /> : Best current practice</p>
+<h3 id="obsolete-rfcs">Obsolete RFCs<a class="headerlink" href="#obsolete-rfcs" title="Permanent link">&para;</a></h3>
+<table class="table">
+<thead>
+<tr>
+<th>RFC</th>
+<th>Description</th>
+<th>Obsoleted by</th>
+<th>Status</th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc2222">RFC 2222</a></td>
+<td>Simple Authentication and Security Layer (SASL)</td>
+<td><a href="https://tools.ietf.org/html/rfc4422">RFC 4422</a>, <a href="https://tools.ietf.org/html/rfc4752">RFC 4752</a></td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc2245">RFC 2245</a></td>
+<td>Anonymous SASL Mechanism</td>
+<td><a href="https://tools.ietf.org/html/rfc4505">RFC 4505</a></td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc2831">RFC 2831</a></td>
+<td>Using Digest Authentication as a SASL Mechanism</td>
+<td><a href="https://tools.ietf.org/html/rfc4505">RFC 4505</a></td>
+<td><img alt="" src="../../images/icons/lightbulb.gif" /></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc4013">RFC 4013</a></td>
+<td>SASLprep: Stringprep Profile for User Names and Passwords</td>
+<td><a href="https://tools.ietf.org/html/rfc7613">RFC 7613</a></td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc7613">RFC 7613</a></td>
+<td>Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords</td>
+<td><a href="https://tools.ietf.org/html/rfc8265">RFC 8265</a></td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+</tr>
+</tbody>
+</table>
+<h3 id="active-rfcs">Active RFCs<a class="headerlink" href="#active-rfcs" title="Permanent link">&para;</a></h3>
+<table class="table">
+<thead>
+<tr>
+<th>RFC</th>
+<th>Description</th>
+<th>Status</th>
+<th></th>
+</tr>
+</thead>
+<tbody>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc2444">RFC 2444</a></td>
+<td>The One-Time-Password SASL Mechanism</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc2808">RFC 2808</a></td>
+<td>The SecurID(r) SASL Mechanism</td>
+<td><img alt="" src="../../images/icons/information.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc4422">RFC 4422</a></td>
+<td>Simple Authentication and Security Layer (SASL)</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc4505">RFC 4505</a></td>
+<td>Anonymous Simple Authentication and Security Layer (SASL) Mechanism</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc4616">RFC 4616</a></td>
+<td>The PLAIN Simple Authentication and Security Layer (SASL) Mechanism</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc4752">RFC 4752</a></td>
+<td>The Kerberos V5 ("GSSAPI") Simple Authentication and Security Layer (SASL) Mechanism</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc58à&amp;">RFC 5801</a></td>
+<td>Using Generic Security Service Application Program Interface (GSS-API) Mechanisms in Simple Authentication and Security Layer (SASL): The GS2 Mechanism Family</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc5802">RFC 5802</a></td>
+<td>Salted Challenge Response Authentication Mechanism (SCRAM) SASL and GSS-API Mechanisms</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc6331">RFC 6331</a></td>
+<td>Moving DIGEST-MD5 to Historic</td>
+<td><img alt="" src="../../images/icons/information.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc7677">RFC 7677</a></td>
+<td>SCRAM-SHA-256 and SCRAM-SHA-256-PLUS Simple Authentication and Security Layer (SASL) Mechanisms</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+<tr>
+<td><a href="https://tools.ietf.org/html/rfc8265">RFC 8265</a></td>
+<td>Preparation, Enforcement, and Comparison of Internationalized Strings Representing Usernames and Passwords</td>
+<td><img alt="" src="../../images/icons/lightbulb_on.gif" /></td>
+<td></td>
+</tr>
+</tbody>
+</table>
 
 
     <div class="nav">