51 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
			
		
		
	
	
			51 lines
		
	
	
		
			1.6 KiB
		
	
	
	
		
			Plaintext
		
	
	
	
	
	
/***********************************************************************
 | 
						|
 * 
 | 
						|
 *  Copyright (C) 2006 Novell, Inc. All Rights Reserved.
 | 
						|
 *
 | 
						|
 *  This library is free software; you can redistribute it and/or
 | 
						|
 *  modify it under the terms of the GNU Lesser General Public
 | 
						|
 *  License as published by the Free Software Foundation; version 2.1
 | 
						|
 *  of the License.
 | 
						|
 *
 | 
						|
 *  This library is distributed in the hope that it will be useful,
 | 
						|
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
						|
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 | 
						|
 *  Library Lesser General Public License for more details.
 | 
						|
 *
 | 
						|
 *  You should have received a copy of the GNU Lesser General Public
 | 
						|
 *  License along with this library; if not, Novell, Inc.
 | 
						|
 * 
 | 
						|
 *  To contact Novell about this file by physical or electronic mail, 
 | 
						|
 *  you may find current contact information at www.novell.com.
 | 
						|
 * 
 | 
						|
 *  Author: Juan Carlos Luciani <jluciani@novell.com>
 | 
						|
 *
 | 
						|
 ***********************************************************************/
 | 
						|
/***********************************************************************
 | 
						|
 *
 | 
						|
 *  README for pwmech
 | 
						|
 *
 | 
						|
 ***********************************************************************/
 | 
						|
 | 
						|
INTRODUCTION
 | 
						|
 | 
						|
pwmech is a client authentication mechanism for the support of username
 | 
						|
and password authenticaton. The mechanism leverages the credentials stored
 | 
						|
in the miCASA cache and does not prompt the user for credentials.
 | 
						|
 | 
						|
SECURITY CONSIDERATIONS
 | 
						|
 | 
						|
The tokens that pwmech generates contain the user's username and password,
 | 
						|
this mandates that the auth_token client utilize a secure channel when
 | 
						|
transfering them to the ATS.
 | 
						|
 
 | 
						|
 | 
						|
 | 
						|
 | 
						|
                
 | 
						|
 | 
						|
 | 
						|
 | 
						|
 | 
						|
 |