GSS API, security mechanism, and documentation

[Garth Boyd]

Hi,

I am interested in the development APIs available to
HPUX 11 and 11i. I understand based on my searching
of HP's web sites to date that it supports a generic and
DCE version of the GSS API and support kerberos v5 as
a security mechanism. These both appear to be available
"out of the box".

1. The documentation seems to indicate that the architecture has the ability to support multiple mechanisms. Are there any mechanisms, planned
or available, other than Kerberos?

2. The manual page for gss_acquire_cred indicates that
this call can retrieve a handle to a principal's credential
by name if that credential has been pre-acquired. How do
you preacquire a credential programmatically? Would this
be a PAM call? Where is this documented?

3. Are there other APIs available? CDSA? Baltimore? Are
these both available with the OS.

4. It appears that Baltimore and HP have an arrangement. Is this a separate purchase?

Thanks in advance

Garth