@misc{rfc4462, series = {Request for Comments}, number = 4462, howpublished = {RFC 4462}, publisher = {RFC Editor}, doi = {10.17487/RFC4462}, url = {https://www.rfc-editor.org/info/rfc4462}, author = {Joseph A. Salowey and Von Welch and Jeffrey Hutzelman and Joseph Galbraith}, title = {{Generic Security Service Application Program Interface (GSS-API) Authentication and Key Exchange for the Secure Shell (SSH) Protocol}}, pagetotal = 29, year = 2006, month = may, abstract = {The Secure Shell protocol (SSH) is a protocol for secure remote login and other secure network services over an insecure network. The Generic Security Service Application Program Interface (GSS-API) provides security services to callers in a mechanism-independent fashion. This memo describes methods for using the GSS-API for authentication and key exchange in SSH. It defines an SSH user authentication method that uses a specified GSS-API mechanism to authenticate a user, and a family of SSH key exchange methods that use GSS-API to authenticate a Diffie-Hellman key exchange. This memo also defines a new host public key algorithm that can be used when no operations are needed using a host's public key, and a new user authentication method that allows an authorization name to be used in conjunction with any authentication that has already occurred as a side-effect of GSS-API-based key exchange. {[}STANDARDS-TRACK{]}}, }