ss5.gss(5) File Formats Manual ss5.gss(5) NAME ss5.gss - Enable GSS Kerberos authentication, integrity and confidentiality (see RFC 1961) SYNOPSIS ss5 usually communicates with socks client in clear-text. If <s> method is set in <auth> directive, ss5 establishes a common security mechanism based on Kerberos mechanisms. DESCRIPTION To enable GSSAPI authentication with the ss5 daemon you must set SS5_GSS_PRINC option in the ss5.conf file indicating your Kerberos service principal name. Before GSSAPI authentication works, you must install libgssapi package. In base of socks client want to do, SS5 accepts 0 (auth only), 1 (integrity) or 2 (encryption) encapsulation values. To add GSSAPI authentication, change the line to: auth - - k set SS5_GSS_PRINC option containing your Kerberos service principal name (i.e. rcmd@fqdn if service is equivalent to "rcmd") 3. Restart the server. SEE ALSO ss5(1), ss5.conf(5), ss5.pam(5), ss5.passwd(5), ss5.ha(5), ss5srv(1), ss5_supa(5), ss5_gss(5) AUTHOR Matteo Ricchetti Send comments to Matteo.Ricchetti@libero.it 22 Feb 2009 ss5.gss(5)
NAME | SYNOPSIS | DESCRIPTION | SEE ALSO | AUTHOR
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=ss5_gss&sektion=5&manpath=FreeBSD+Ports+15.1.quarterly>