System Administration Commands                           gssd(1M)



NAME
     gssd - generates and validates GS-API tokens for kernel RPC

SYNOPSIS
     /usr/lib/gss/gssd


DESCRIPTION
     gssd is the user mode daemon that operates between the  ker-
     nel rpc and the Generic Security Service Application Program
     Interface (GS-API) to generate and validate  GS-API  secu-
     rity  tokens.  In  addition, gssd maps the GS-API principal
     names to the local user  and  group  ids.  By  default,  all
     groups  that  the requested user belongs to will be included
     in the grouplist credential. gssd is invoked by the Internet
     daemon inetd(1m) the first time that the kernel RPC requests
     GS-API services.

EXIT STATUS
     The following exit values are returned:

     0     Successful completion.


     >0    An error occurred.


ATRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:



     
           ATRIBUTE TYPE               ATRIBUTE VALUE       
    
     Availability                 SUNWgssk                    
    
     Interface Stability          Evolving                    
    


SEE ALSO
     kill(1),   pkill(1),   svcs(1),   inetadm(1M),    inetd(1M),
     gsscred(1M),  svcadm(1M),  gsscred.conf(4),  resolv.conf(4),
     attributes(5), smf(5)


     RFC 2078

NOTES




SunOS 5.11          Last change: 25 Apr 2007                    1






System Administration Commands                           gssd(1M)



     The following signal has the specified effect when  sent  to
     the server process using the kill(1) command:

     SIGHUP    gssd rereads the gsscred.conf(4) options.



     When one of the mechanisms being used is Kerberos, then  the
     gssd  process must be restarted after adding or changing the
     resolv.conf(4) file.


     The gssd service is managed by the service management facil-
     ity, smf(5), under the service identifier:

       svc:/network/rpc/gss:default




     Administrative actions on this service,  such  as  enabling,
     disabling,  or  requesting  restart,  can be performed using
     svcadm(1M). Responsibility  for  initiating  and  restarting
     this  service  is delegated to inetd(1M). Use inetadm(1M) to
     make configuration changes and to view configuration  infor-
     mation for this service. The service's status can be queried
     using the svcs(1) command.




























SunOS 5.11          Last change: 25 Apr 2007                    2