Developer's Guide to Oracle Solaris Security

November 2010

This book is for developers of applications that consume security services as well as developers of applications that provide security services for the Oracle Solaris operating system. Programming interfaces are documented for the following services: PAM, SASL, GSS-API, the Oracle Solaris cryptographic framework, the Oracle Solaris Key Management Framework, and process privileges.

Document Information
Preface
1. Oracle Solaris Security for Developers (Overview)
- Overview of Oracle Solaris Security Features for Developers
- System Security
- Network Security Architecture
2. Developing Privileged Applications
- Privileged Applications
- About Privileges
- Programming with Privileges
- Guidelines for Developing Privileged Applications
- About Authorizations
3. Writing PAM Applications and Services
- Introduction to the PAM Framework
- PAM Configuration
- Writing Applications That Use PAM Services
  - A Simple PAM Consumer Example
  - Other Useful PAM Functions
- Writing Conversation Functions
- Writing Modules That Provide PAM Services
  - Requirements for PAM Service Providers
  - Sample PAM Provider Service Module
4. Writing Applications That Use GSS-API
- Introduction to GSS-API
- Important Elements of GSS-API
- Developing Applications That Use GSS-API
5. GSS-API Client Example
- GSSAPI Client Example Overview
  - GSSAPI Client Example Structure
  - Running the GSSAPI Client Example
- GSSAPI Client Example: main() Function
- Opening a Connection With the Server
- Establishing a Security Context With the Server
  - Translating a Service Name into GSS-API Format
  - Establishing a Security Context for GSS-API
- Miscellaneous GSSAPI Context Operations on the Client Side
- Wrapping and Sending a Message
- Reading and Verifying a Signature Block From a GSS-API Client
- Deleting the Security Context
6. GSS-API Server Example
- GSSAPI Server Example Overview
  - GSSAPI Server Example Structure
  - Running the GSSAPI Server Example
- GSSAPI Server Example: main() Function
- Acquiring Credentials
- Checking for inetd
- Receiving Data From a Client
- Cleanup in the GSSAPI Server Example
7. Writing Applications That Use SASL
- Introduction to Simple Authentication Security Layer (SASL)
  - SASL Library Basics
  - Steps in the SASL Cycle
- SASL Example
- SASL for Service Providers
  - SASL Plug-in Overview
  - SASL Plug-in Development Guidelines
8. Introduction to the Oracle Solaris Cryptographic Framework
- Oracle Solaris Cryptography Terminology
- Overview of the Cryptographic Framework
- Components of the Cryptographic Framework
- What Cryptography Developers Need to Know
- Avoiding Data Cleanup Collisions in User-Level Providers
9. Writing User-Level Cryptographic Applications and Providers
- Overview of the Cryptoki Library
- User-Level Cryptographic Application Examples
10. Introduction to the Oracle Solaris Key Management Framework
- Oracle Solaris Key Management Framework Features
- Oracle Solaris Key Management Framework Components
- Oracle Solaris Key Management Framework Example Application
A. Sample C-Based GSS-API Programs
- Client-Side Application
- Server-Side Application
- Miscellaneous GSS-API Sample Functions
B. GSS-API Reference
- GSS-API Functions
  - Functions From Previous Versions of GSS-API
    - Functions for Manipulating OIDs
    - Renamed Functions
- GSS-API Status Codes
- GSS-API Data Types and Values
- Implementation-Specific Features in GSS-API
- Kerberos v5 Status Codes
C. Specifying an OID
- Files with OID Values
  - /etc/gss/mech File
  - /etc/gss/qop File
- gss_str_to_oid() Function
- Constructing Mechanism OIDs
  - createMechOid() Function
- Specifying a Non-Default Mechanism
D. Source Code for SASL Example
- SASL Client Example
- SASL Server Example
- Common Code
E. SASL Reference Tables
- SASL Interface Summaries
F. Packaging and Signing Cryptographic Providers
- Packaging Cryptographic Provider Applications and Modules
- Adding Signatures to Providers
Glossary
Index
- A
- C
- D
- E
- F
- G
- H
- I
- J
- K
- L
- M
- N
- O
- P
- Q
- R
- S
- T
- U
- V
- W
- X

Skip Navigation Links
	Developer's Guide to Oracle Solaris Security Oracle Solaris 11 Express 11/10