Using GSS-API Mechanisms in SASL: The GS2 Mechanism Family

This work is sponsored by Simon Josefsson Datakonsult AB. If you need commercial help with utilizing this technology, or have a related project that you want help with, please feel free to contact me. If you find my work in this area useful, also please consider making a donation. No amount is too small!

Resources

• Update of RFC 5801, GS2Bis (text)
• Update of RFC 5801, GS2Bis (html)
• diff between RFC 5801 and local GS2Bis live version
• final RFC 5801
• draft-ietf-sasl-gs2.txt (local live version)
• draft-ietf-sasl-gs2.xml (live source code)
• draft-ietf-sasl-gs2.html (live html code)
• diff between local live version and RFC 5801
• diff between -20 and RFC 5801
• diff between -20 and local live version
• diff between -19 and -20
• diff between -18 and -19
• diff between -17 and -18
• diff between -16 and -17
• diff between -15 and -16
• diff between -14 and -15
• diff between -13 and -14
• diff between -12 and -13
• diff between -11 and -12
• diff between -10 and -11
• diff between -09 and -10
• diff between -08 and -09
• diff between -07 and -08
• diff between -06 and -07
• diff between -05 and -06
• diff between -04 and -05
• diff between -03 and -04
• diff between -02 and -03
• diff between -01 and -02
• diff between -00 and -01

Implementations

If you know of projects that implements SASL GS2-* that you think should be mentioned here, please let me know.

• GNU SASL: Supported since version 1.3 released on 2009-10-08.
• GNU Generic Security Services: Plans to support it as a native mechanism, based on GNU SASL code base.

History

2010-07-13

Final RFC 5801 published. Hooray!

2010-01-11

Published -20 WG document to use a new table, should be ready for publication now.

2010-01-08

Published -19 WG document to address GenArt, SecDir and IESG tracker comments.

2009-11-18

IETF wide last call ends.

2009-11-09

Published -18 WG document. Minor fixes.

2009-10-26

The document is in 4 week IETF-wide last call, you can track IESG discussions.

2009-09-09

Published -17 WG document. Minor fixes.

2009-05-26

Published -13 WG document. Minor fixes.

2009-04-18

Published -12 WG document. Minor fixes.

2009-03-23

Published -11 WG document. New protocol based on SCRAM discussions.

2008-07-13

Published -10 WG document. Refresh expired document.

2007-10-09

Published -09 WG document. Answered AD review comments.

2007-02-06

Published -08 WG document. Fixes WGLC comments.

2007-02-06

Published -07 WG document. Minor editorial fixes before WGLC.

2007-02-06

Published -06 WG document. Minor editorial fixes.

2007-01-09

Published -05 WG document. Adds support for non-integrity capable GSS-API mechanisms.

2006-12-07

Published -04 WG document. Incorporates various suggestions and improvements since -03.

2006-11-07

Wrote presentation for IETF-67 (as PDF).

2006-10-23

Published -03 WG document. Solves most WGLC concerns.

2006-06-13

Published -02 WG document. This document is in WGLC first two weeks of September.

2006-06-10

Wrote presentation for IETF-66 (as PDF).

2006-06-26

Published -01 WG document.

2006-03-23

Wrote presentation for IETF-65 (as PDF).

2006-02-13

Published -00 WG document.

2006-01-25 ... 2006-02-10

Slowly working towards producing a WG document, based on some WG discussion.

2006-01-03

WG chair suggests that my document should be published as a WG document.

2005-11-18

Published -00 and asked for WG review.

Copying conditions

The copying conditions for RFCs apply, of course. However, beyond that, the part of the document that I've written (the "work") is also available under the following license.

	Copyright (c) 2005, 2006, 2007, 2008, 2009, 2010 Simon Josefsson

	The author grants third parties the irrevocable right to copy,
	use and distribute this document, with or without
	modification, in any medium, without royalty.  The author
	requests that any citation or excerpt of unmodified text
	reference this document.  If the text is modified in any way
	other than translation, any claim of endorsement by the IETF
	or status within its document series must be removed.