[4043] in Kerberos
Re: What is NetSP?
daemon@ATHENA.MIT.EDU (dmccarty@vnet.ibm.com)
Mon Oct 17 18:28:27 1994
To: kerberos@MIT.EDU
Date: 17 Oct 1994 15:41:38 GMT
From: dmccarty@vnet.ibm.com
Reply-To: dmccarty@vnet.ibm.com
In <01HI7XSDT5R80000KH@MR.STANFORD.EDU>, SADLER_C@HOSP.STANFORD.EDU (Connie Sadler 415725-7703) writes:
>
> What is NetSP? How does it compare to Kerberos? What does it support?
> Any info would be greatly appreciated - thanks!
>
> Connie
>
Network Security Product allows Single Signon, supports the
Generic Security Services(GSS) APIs, RFCs 1508 and 1509, and
Third Party Authentication.
NetSP provides Single Signon to RACF applications,
OS/2 LAN Servers, NetWare Servers, and GSS Client/Server
applications.
The GSS APIs allow clients and servers to share a security
context. Once a context is established, i.e., the client and
server have proved their identities, data can be passed between
the two. This data can be either masked or integrity checked.
Parts of the GSS API is mechanism specific, NetSP's data masking
is based on CDMF which is a 40 bit DES implementation. CDMF
can be exported from the United States.
NetSP's third party authentication is designed to use smaller
messages than Kerberos. Furthermore, NetSP allows either the
Client or Server to communicate with the third party authenticator.
NetSP V1R2 runs on AIX, OS/2, HP-UX, Sun, DOS, and Windows.
Hope this helps....
Dan McCarty
IBM Network Security Product
