基于SASL框架下身份认证机制的研究  

Research of Identity Authentication Mechanism Based on SASL Framework

作　　者：郑之华 

机构地区：[1]福建省湄洲湾职业技术学院自动化工程系,福建莆田351254

出　　处：《长春大学学报》2015年第2期5-8,12,共5页Journal of Changchun University

摘　　要：在LDAP V3中身份认证过程是包含在绑定操作过程中的,绑定操作的功能是允许验证信息在客户端和服务端之间交换的,LDAP V3主要支持3种认证方式:匿名认证、基本认证、基于SASL认证。目前SASL定义的安全机制主要有:Anonymous、CRAM-MD5、DIGEST-MD5、External、Kerberos v4与v5等。在这里我们针对CRAM-MD5、DIGEST-MD5、External这三种安全机制进行分析和比较它们的各自优缺点。通过分析和比较为实际身份认证系统提供一个参考。Identity authentication process in LDAP V3 is contained in the binding operation process, which allows the verification infor- mation to exchange between the client end and the service end. LDAP V3 mainly supports three kinds of authentication methods ： anon- ymous authentication, basic authentication and SASL-based authentication. At present, the security mechanism of SASL mainly in- cludes Anonymous, CRAM-MD5, DIGEST-MD5, External, Kerberos v 4 and v 5. This paper, focusing on CRAM-MD5, DIGEST- MD5 and External, analyzes and compares their advantages and disadvantages, attempting to provide a reference for the actual identity authentication system.

关 键 词：SASL CRAM-MD5 DIGEST-MD5 Extrernal 

分 类 号：TN918.91[电子电信—通信与信息系统]