JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle Solaris Security for Developers Guide
search filter icon
search icon

Document Information

Preface

1.  Oracle Solaris Security for Developers (Overview)

2.  Developing Privileged Applications

3.  Writing PAM Applications and Services

4.  Writing Applications That Use GSS-API

5.  GSS-API Client Example

6.  GSS-API Server Example

7.  Writing Applications That Use SASL

8.  Introduction to the Oracle Solaris Cryptographic Framework

9.  Writing User-Level Cryptographic Applications and Providers

10.  Using the Smart Card Framework

A.  Sample C-Based GSS-API Programs

B.  GSS-API Reference

C.  Specifying an OID

D.  Source Code for SASL Example

E.  SASL Reference Tables

F.  Packaging and Signing Cryptographic Providers

Glossary

Index

A

C

D

E

F

G

H

I

J

K

L

M

N

O

P

Q

R

S

T

U

V

W

X

S

SASL
architecture, SASL Architecture
authentication, SASL Authentication
authid, SASL Library Basics
auxprop plug-ins, Auxiliary Property (auxprop) Plug-ins
callbacks
SASL_CB_AUTHNAME, Communication in SASL
SASL_CB_CANON_USER, Communication in SASL
SASL_CB_ECHOPROMPT, Communication in SASL
SASL_CB_GETCONF, Communication in SASL
SASL_CB_GETOPT, Communication in SASL
SASL_CB_GETPATH, Communication in SASL
SASL_CB_GETREALM, Communication in SASL
SASL_CB_LANGUAGE, Communication in SASL
SASL_CB_LOG, Communication in SASL
SASL_CB_NOECHOPROMPT, Communication in SASL
SASL_CB_PASS, Communication in SASL
SASL_CB_PROXY_POLICY, Communication in SASL
SASL_CB_SERVER_USERDB_CHECKPASS, Communication in SASL
SASL_CB_SERVER_USERDB_SETPASS, Communication in SASL
SASL_CB_USER, Communication in SASL
SASL_CB_VERIFYFILE, Communication in SASL
canonicalization, User Canonicalization Plug-ins
client sample application, SASL Client Example
confidentiality, SASL Confidentiality and Integrity
connection contexts, SASL Connection Contexts
functions, SASL Interface Summaries
integrity, SASL Confidentiality and Integrity
library, SASL Library Basics
libsasl API, Communication in SASL
libsasl initialization, libsasl Initialization
life cycle, Steps in the SASL Cycle
mechanisms, Security Mechanisms
overview, Introduction to Simple Authentication Security Layer (SASL)
plug-in design, SASL Plug-in Development Guidelines
client plug-ins, Client Plug-ins
overview, SASL Plug-in Overview
server plug-ins, Server Plug-ins
structures, Important Structures for SASL Plug-ins
reference tables, SASL Interface Summaries
releasing resources, libsasl Cleanup
releasing sessions, Releasing SASL Sessions
role in Solaris OS, Network Security Architecture
sample functions, Common Code
sample output, SASL Example
server sample application, SASL Server Example
session initialization, SASL Session Initialization
setting SSF, SASL Session Initialization
SPI, SASL Plug-in Overview
SSF, SASL Security Strength Factor
userid, SASL Library Basics
sasl_canonuser_plug_nit() function, User Canonicalization Plug-ins
SASL_CB_AUTHNAME callback, Communication in SASL
SASL_CB_CANON_USER callback, Communication in SASL
SASL_CB_ECHOPROMPT callback, Communication in SASL
SASL_CB_GETCONF callback, Communication in SASL
SASL_CB_GETOPT callback, Communication in SASL
SASL_CB_GETPATH callback, Communication in SASL
SASL_CB_GETREALM callback, Communication in SASL
SASL_CB_LANGUAGE callback, Communication in SASL
SASL_CB_LOG callback, Communication in SASL
SASL_CB_NOECHOPROMPT callback, Communication in SASL
SASL_CB_PASS callback, Communication in SASL
SASL_CB_PROXY_POLICY callback, Communication in SASL
SASL_CB_SERVER_USERDB_CHECKPASS callback, Communication in SASL
SASL_CB_SERVER_USERDB_SETPASS callback, Communication in SASL
SASL_CB_USER callback, Communication in SASL
SASL_CB_VERIFYFILE callback, Communication in SASL
sasl_client_add_plugin() function, SASL Plug-in Overview
sasl_client_init() function
libsasl Initialization
SASL Plug-in Overview
sasl_client_new() function, SASL life cycle, SASL Session Initialization
sasl_client_start() function, SASL life cycle, SASL Authentication
SASL_CONTINUE flag, SASL Authentication
sasl_decode() function, SASL Confidentiality and Integrity
sasl_dispose() function
Releasing SASL Sessions
libsasl Cleanup
sasl_done() function
Releasing SASL Sessions
libsasl Cleanup
sasl_encode() function, SASL Confidentiality and Integrity
sasl_getprop() function, checking SSF, SASL Confidentiality and Integrity
SASL_INTERACT flag, SASL Authentication
SASL_OK flag, SASL Authentication
sasl_server_add_plugin() function, SASL Plug-in Overview
sasl_server_init() function
libsasl Initialization
SASL Plug-in Overview
sasl_server_new() function, SASL life cycle, SASL Session Initialization
sasl_server_start() function, SASL life cycle, SASL Authentication
SCF
card objects, Developing Smart Card Consumer Applications
interfaces, Developing Smart Card Consumer Applications
listener objects, Developing Smart Card Consumer Applications
miscellaneous functions, SCF Card and Miscellaneous Interfaces
overview, Oracle Solaris Smart Card Framework Overview
session functions, SCF Session Interfaces
session objects, Developing Smart Card Consumer Applications
terminal functions, SCF Terminal Interfaces
terminal objects, Developing Smart Card Consumer Applications
SCF_Card_close() function, SCF Card and Miscellaneous Interfaces
SCF_Card_exchangeAPDU() function, SCF Card and Miscellaneous Interfaces
SCF_Card_getInfo() function, SCF Card and Miscellaneous Interfaces
SCF_Card_lock() function, SCF Card and Miscellaneous Interfaces
SCF_Card_reset() function, SCF Card and Miscellaneous Interfaces
SCF_Card_unlock() function, SCF Card and Miscellaneous Interfaces
SCF_Card_waitForCardRemoved() function, SCF Card and Miscellaneous Interfaces
SCF_Session_close() function, SCF Session Interfaces
SCF_Session_freeInfo() function, SCF Session Interfaces
SCF_Session_getInfo() function, SCF Session Interfaces
SCF_Session_getSession() function, SCF Session Interfaces
SCF_Session_getTerminal() function, SCF Session Interfaces
SCF_strerror() function, SCF Card and Miscellaneous Interfaces
SCF_Terminal_addEventListener() function, SCF Terminal Interfaces
SCF_Terminal_close() function, SCF Terminal Interfaces
SCF_Terminal_freeInfo() function, SCF Terminal Interfaces
SCF_Terminal_getCard() function, SCF Terminal Interfaces
SCF_Terminal_getInfo() function, SCF Terminal Interfaces
SCF_Terminal_removeEventListener() function, SCF Terminal Interfaces
SCF_Terminal_updateEventListener() function, SCF Terminal Interfaces
SCF_Terminal_waitForCardAbsent() function, SCF Terminal Interfaces
SCF_Terminal_waitForCardPresent() function, SCF Terminal Interfaces
SEAM, GSS-API, Available Mechanisms in GSS-API
security context, See contexts
security flavor, Glossary
security mechanisms, See GSS-API
security policy, privileged application guidelines, Guidelines for Developing Privileged Applications
security strength factor, See SSF
send_token() function, GSS-API client example, Establishing a Security Context for GSS-API
sequence problems, GSS-API, Detecting Sequence Problems in GSS-API
server_acquire_creds() function, GSS-API server example, Acquiring Credentials
server_establish_context() function, GSS-API server example, Accepting a Context
server plug-ins, SASL, Server Plug-ins
service provider interface, See SPI
session management, PAM service module, PAM Service Modules
session objects
SCF, Developing Smart Card Consumer Applications
Solaris cryptographic framework, Oracle Solaris Cryptography Terminology
setppriv() function, synopsis, setppriv(): for Setting Privileges
shell escapes, and privileges, Guidelines for Developing Privileged Applications
sign_server() function
GSS-API client example, GSSAPI Server Example: main() Function
GSS-API server example, Receiving Data From a Client
signature blocks
GSS-API
gss-client example, Reading and Verifying a Signature Block From a GSS-API Client
signing messages, GSS-API, Signing and Returning the Message
signing messages example, Solaris cryptographic framework, Sign and Verify Example
signing packages, Adding Signatures to Providers
Simple Authentication and Security Layer, See SASL
slots, Solaris cryptographic framework, Oracle Solaris Cryptography Terminology
Smart Card, role in Solaris OS, Network Security Architecture
smart card framework, See SCF
smart card terminals, installation guidelines, Installation of Smart Card Terminals
soft tokens, Solaris cryptographic framework, Oracle Solaris Cryptography Terminology
Solaris cryptographic framework
architecture, Overview of the Cryptographic Framework
crypto pseudo device driver, Components of the Cryptographic Framework
cryptoadm pseudo device driver, Components of the Cryptographic Framework
cryptoadm utility, Components of the Cryptographic Framework
cryptographic providers, Components of the Cryptographic Framework
cryptoki library, Overview of the Cryptoki Library
design requirements
kernel-level consumers, Requirements for Developers of Kernel-Level Consumers
kernel-level providers, Requirements for Developers of Kernel-Level Providers
special treatment of _fini() function, Avoiding Data Cleanup Collisions in User-Level Providers
user-level consumers, Requirements for Developers of User-Level Consumers
user-level providers, Requirements for Developers of User-Level Providers
elfsign utility, Components of the Cryptographic Framework
examples
message digest, Message Digest Example
random byte generation, Random Byte Generation Example
signing and verifying messages, Sign and Verify Example
symmetric encryption, Symmetric Encryption Example
user-level provider, User-Level Provider Example
introduction, Introduction to the Oracle Solaris Cryptographic Framework
kernel programmer interface, Components of the Cryptographic Framework
libpkcs11.so, Components of the Cryptographic Framework
modules verification library, Components of the Cryptographic Framework
packaging applications, Packaging Cryptographic Provider Applications and Modules
pkcs11_kernel.so, Components of the Cryptographic Framework
pkcs11_softtoken.so, Components of the Cryptographic Framework
pluggable interface, Components of the Cryptographic Framework
role in Solaris OS, Network Security Architecture
scheduler / load balancer
Components of the Cryptographic Framework
Components of the Cryptographic Framework
SPI
kernel level, Components of the Cryptographic Framework
Solaris Enterprise Authentication Mechanism, See SEAM
Solaris smart card framework, See SCF
specifying a QOP, Files with OID Values
specifying mechanisms in GSS-API, Files with OID Values
specifying OIDs, Specifying an OID
SPI
Solaris cryptographic framework
kernel level, Components of the Cryptographic Framework
user level, Components of the Cryptographic Framework
SSF
defined, SASL Security Strength Factor
setting
SASL Session Initialization
SASL Authentication
status codes
GSS-API
GSS-API Status Codes
GSS-API Status Codes
major, GSS-API Status Codes
minor, GSS-API Status Codes
strings, GSS-API, Strings and Similar Data in GSS-API
SUNW_C_GetMechSession() function
Extended PKCS #11 Functions: SUNW_C_GetMechSession()
Extended PKCS #11 Functions: SUNW_C_KeyToObject
digest message example, Message Digest Example
symmetric encryption example, Symmetric Encryption Example
symmetric encryption
Solaris cryptographic framework
example, Symmetric Encryption Example
system privileges, Privilege Categories
System V IPC privileges, Privilege Categories