28 lines
631 B
Plaintext
28 lines
631 B
Plaintext
|
/***********************************************************************
|
||
|
|
*
|
||
|
|
* README for pwmech
|
||
|
|
*
|
||
|
|
***********************************************************************/
|
||
|
|
|
||
|
|
INTRODUCTION
|
||
|
|
|
||
|
|
pwmech is a client authentication mechanism for the support of username
|
||
|
|
and password authenticaton. The mechanism leverages the credentials stored
|
||
|
|
in the miCASA cache and does not prompt the user for credentials.
|
||
|
|
|
||
|
|
SECURITY CONSIDERATIONS
|
||
|
|
|
||
|
|
The tokens that pwmech generates contain the user's username and password,
|
||
|
|
this mandates that the auth_token client utilize a secure channel when
|
||
|
|
transfering them to the ATS.
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|