All geek questions in one place

SASL vs gssapi

I am doing a project that includes authentication, and I cannot understand the difference between SASL and gssapi. Is gssapi used under SASL covers? Can I use gssapi without SASL? What is the right thing?

If I use libsasl, do I need to link to libgssapi _ *?

Thanks.

+4
source share
1 answer

SASL and gssapi basically solve the same problem in different ways. Both ways are to find the best common authentication method to use between the two systems.

No, gssapi is not used under the hood in SASL unless you use something like RFC4752

Yes, you can use gssapi without SASL, examples of this would be a typical entry in a Linux machine in a Windows AD domain through the kerberos / gssapi providers.

It all depends on which authentication scenarios you should implement, and both SASL and gssapi use them. GSSAPI is most often used with the Kerberos system.

+3
source

Source: https://habr.com/ru/post/1403257/

More articles:


All Articles