2 SIMPLE AUTHENTICATION AND SECURITY LAYER (SASL) MECHANISMS
3 ----------------------------------------------------------
5 (last updated 2001 August 17)
7 The Simple Authentication and Security Layer (SASL) [RFC2222] is a
8 method for adding authentication support to connection-based
9 protocols. To use this specification, a protocol includes a command
10 for identifying and authenticating a user to a server and for
11 optionally negotiating a security layer for subsequent protocol
12 interactions. The command has a required argument identifying a SASL
15 SASL mechanisms are named by strings, from 1 to 20 characters in
16 length, consisting of upper-case letters, digits, hyphens, and/or
17 underscores. SASL mechanism names must be registered with the IANA.
18 Procedures for registering new SASL mechanisms are given in the
19 section "Registration procedures" of RFC2222.
22 MECHANISMS OWNER REFERENCE
23 ---------- ----- ---------
25 KERBEROS_V4 IESG <iesg@ietf.org> [RFC2222]
27 GSSAPI IESG <iesg@ietf.org> [RFC2222]
29 SKEY (OBSOLETE) IESG <iesg@ietf.org> [RFC2444]
31 EXTERNAL IESG <iesg@ietf.org> [RFC2222]
33 CRAM-MD5 IESG <iesg@ietf.org> [RFC2195]
35 ANONYMOUS IESG <iesg@ietf.org> [RFC2245]
37 OTP IESG <iesg@ietf.org> [RFC2444]
39 GSS-SPNEGO Paul Leach <paulle@microsoft.com> [Leach]
41 PLAIN IESG <iesg@ietf.org> [RFC2595]
43 SECURID Magnus Nystrom <magnus@rsasecurity.com>[RFC2808]
45 NTLM Paul Leach <paulle@microsoft.com> [Leach]
47 NMAS_LOGIN Mark G. Gayman <mgayman@novell.com> [Gayman]
49 NMAS_AUTHEN Mark G. Gayman <mgayman@novell.com> [Gayman]
51 DIGEST-MD5 IESG <iesg@ietf.org> [RFC2831]
53 9798-U-RSA-SHA1-ENC robert.zuccherato@entrust.com [RFC3163]
55 9798-M-RSA-SHA1-ENC robert.zuccherato@entrust.com [RFC3163]
57 9798-U-DSA-SHA1 robert.zuccherato@entrust.com [RFC3163]
59 9798-M-DSA-SHA1 robert.zuccherato@entrust.com [RFC3163]
61 9798-U-ECDSA-SHA1 robert.zuccherato@entrust.com [RFC3163]
63 9798-M-ECDSA-SHA1 robert.zuccherato@entrust.com [RFC3163]
70 [RFC2222] Myers, J., "Simple Authentication and Security Layer
71 (SASL)", RFC 2222, Netscape Communications, October 1997.
73 [RFC2195] Klensin, J., Catoe, R., Krumviede, P. "IMAP/POP AUTHorize
74 Extension for Simple Challenge/Response", RFC 2195, MCI,
77 [RFC2245] Newman, C., "Anonymous SASL Mechanism", RFC 2245, Innosoft,
80 [RFC2444] Newman, C., "The One-Time-Password SASL Mechanism", RFC
83 [RFC2595] Newman, C., "Using TLS with IMAP, POP3 and ACAP", RFC 2595,
86 [RFC2808] Nystrom, M., "The SecurID(r) SASL Mechanism", RFC 2808,
89 [RFC2831] Leach, P. and C. Newman, "Using Digest Authentication as a
90 SASL Mechanism", RFC 2831, May 2000.
93 [RFC3163] R. Zuccherato and M. Nystrom, "ISO/IEC 9798-3 Authentication
94 SASL Mechanism", RFC 3163, August 2001.
101 [Gayman] Mark G. Gayman, <mgayman@novell.com>, September 2000.
103 [Leach] Paul Leach, <paulle@microsoft.com>, December 1998, June 2000.