--- stuff/gssd-orig	Tue Mar 24 20:20:49 2009
+++ stuff/gssd-new	Tue Mar 24 20:21:12 2009
@@ -1,86 +1,92 @@
 
 
 
 System Administration Commands                           gssd(1M)
 
 
 
 NAME
      gssd - generates and validates GSS-API tokens for kernel RPC
 
 SYNOPSIS
      /usr/lib/gss/gssd
 
 
 DESCRIPTION
      gssd is the user mode daemon that operates between the  ker-
      nel rpc and the Generic Security Service Application Program
      Interface (GSS-API) to generate and validate  GSS-API  secu-
      rity  tokens.  In  addition, gssd maps the GSS-API principal
      names to the local user  and  group  ids.  By  default,  all
      groups  that  the requested user belongs to will be included
      in the grouplist credential. gssd is invoked by the Internet
      daemon inetd(1m) the first time that the kernel RPC requests
      GSS-API services.
 
 EXIT STATUS
      The following exit values are returned:
 
      0     Successful completion.
 
 
      >0    An error occurred.
 
 
 ATTRIBUTES
      See attributes(5) for descriptions of the  following  attri-
      butes:
 
 
 
      ____________________________________________________________
     |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
     |_____________________________|_____________________________|
     | Availability                | SUNWgssk                    |
     |_____________________________|_____________________________|
     | Interface Stability         | Evolving                    |
     |_____________________________|_____________________________|
 
 
 SEE ALSO
      kill(1),   pkill(1),   svcs(1),   inetadm(1M),    inetd(1M),
      gsscred(1M),  svcadm(1M),  gsscred.conf(4),  resolv.conf(4),
-     attributes(5), smf(5)
+     attributes(5), smf(5), cpg_change(2), pam_unix_cred(5)
 
 
      RFC 2078
 
 NOTES
 
      The following signal has the specified effect when  sent  to
      the server process using the kill(1) command:
 
      SIGHUP    gssd rereads the gsscred.conf(4) options.
 
 
 
      When one of the mechanisms being used is Kerberos, then  the
      gssd  process must be restarted after adding or changing the
      resolv.conf(4) file.
 
 
+     gssd uses  the  gss_acquire_cred_with_ucred(3GSS)  to obtain
+     credentials suitable for use with gss_init_sec_context(3GSS).
+     This means that credentials process group (CPG)  information
+     can be used to select an appropriate GSS-API credential.
+
+
      The gssd service is managed by the service management facil-
      ity, smf(5), under the service identifier:
 
        svc:/network/rpc/gss:default
 
 
 
 
      Administrative actions on this service,  such  as  enabling,
      disabling,  or  requesting  restart,  can be performed using
      svcadm(1M). Responsibility  for  initiating  and  restarting
      this  service  is delegated to inetd(1M). Use inetadm(1M) to
      make configuration changes and to view configuration  infor-
      mation for this service. The service's status can be queried
      using the svcs(1) command.