Must support all new GSS-API protocols defined in RFC 2203 RPCSEC_GSS, including modern encryption types

• Must support all new GSS-API protocols defined in RFC 2203 RPCSEC_GSS, including modern encryption types

• Added support for Low Infrastructure Public Key (LIPKEY) GSS_API mechanism (an extension of the existing Simple Public Key GSS_API method (SPKM-1))

• • This allows sending user access token securely to the server with only a list of approved CA’s on the client, and a public key on the server
  • This is simpler than setting up Kerberos, PKI, or other heavy-weight authentication mechanisms