<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet type="text/xsl" href="rpc-authentication-numbers.xsl"?>
<?xml-model href="rpc-authentication-numbers.rng" schematypens="http://relaxng.org/ns/structure/1.0" ?>
<registry xmlns="http://www.iana.org/assignments" id="rpc-authentication-numbers">
  <category>Remote Procedure Call (RPC)</category>
  <title>Remote Procedure Call (RPC) Authentication Numbers</title>
  <created>2009-04-15</created>
  <updated>2022-09-14</updated>
   
  <registry id="flavor">
    <title>RPC Authentication Flavor Numbers</title>   
    <xref type="rfc" data="rfc5531"/>
    <registration_rule>First Come First Served</registration_rule>
    <note>For all RPC authentication flavor and authentication status numbers
to be used on the Internet, it is strongly advised that an
informational or standards-track RFC be published describing the
authentication mechanism behaviour and parameters.
New pseudo-flavor requests will be assigned from the 390000-390255 
block. All other assignments will be made sequentially starting from 
decimal 400000.
    </note>
    <record>
      <name>AUTH_NONE</name>
      <flavorname>none</flavorname>
      <value>0</value>
      <description>
        no authentication, see RFC 1831/a.k.a. AUTH_NULL</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_SYS</name>
      <flavorname>sys</flavorname>
      <value>1</value>
      <description>
        unix style (uid+gids), RFC 1831/a.k.a. AUTH_UNIX</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_SHORT</name>
      <flavorname/>
      <value>2</value>
      <description>
        short hand unix style, RFC 1831</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_DH</name>
      <flavorname>dh</flavorname>
      <value>3</value>
      <description>
        des style (encrypted timestamp)/a.k.a. AUTH_DES, see RFC 2695</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_KERB</name>
      <flavorname>krb4</flavorname>
      <value>4</value>
      <description>
        kerberos auth, see RFC 2695</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_RSA</name>
      <flavorname/>
      <value>5</value>
      <description>
        RSA authentication</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>RPCSEC_GSS</name>
      <flavorname/>
      <value>6</value>
      <description>
        GSS-based RPC security for auth, integrity and privacy, RFC 5403</description>
      <xref type="rfc" data="rfc5531"/>
      <xref type="rfc-errata" data="4849"/>
    </record>
    <record date="2020-11-09">
      <name>AUTH_TLS</name>
	    <flavorname>TLS</flavorname>
      <value>7</value>
      <description>
        Indicates support for RPC-over-TLS</description>
      <xref type="rfc" data="rfc9289"/>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>8-30000</value>
      <description>
        Unassigned
      </description>
    </record>
    <record>
      <name>AUTH_NW</name>
      <flavorname/>
      <value>30001</value>
      <description>
        NETWARE</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>30002-199999</value>
      <description>
        Unassigned
      </description>
    </record>    
    <record>
      <name>
        AUTH_SEC
      </name>
      <flavorname/>
      <value>200000</value>
      <description>
        TSIG NFS subcommittee
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>200001-200003</value>
      <description>
        Unassigned
      </description>
    </record> 
    <record>
      <name>
        AUTH_ESV
      </name>
      <flavorname/>
      <value>200004</value>
      <description>
        SVr4 ES
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>200005-299999</value>
      <description>
        Unassigned
      </description>
    </record> 
    <record>
      <name>
        AUTH_NQNFS
      </name>
      <flavorname/>
      <value>300000</value>
      <description>
        Univ. of Guelph - Not Quite NFS
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>
        AUTH_GSSAPI
      </name>
      <flavorname/>
      <value>300001</value>
      <description>
        OpenVision (john.linn@ov.com)
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>
        AUTH_ILU_UGEN
      </name>
      <flavorname/>
      <value>300002</value>
      <description>
        Xerox (janssen@parc.xerox.com) - ILU Unsecured Generic Identity
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>
        AUTH_SPNEGO
      </name>
      <flavorname/>
      <value>390000</value>
      <description/>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>390000-390255</value>
      <description>
        NFS 'pseudo' flavors for RPCSEC_GSS
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname>krb5</flavorname>
      <value>390003</value>
      <description>
        kerberos_v5 authentication, RFC 2623
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname>krb5i</flavorname>
      <value>390004</value>
      <description>
        kerberos_v5 with data integrity, RFC 2623
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname>krb5p</flavorname>
      <value>390005</value>
      <description>
        kerberos_v5 with data privacy, RFC 2623
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>390256-199999999</value>
      <description>
        Unassigned
      </description>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>200000000</value>
      <description>
        Reserved
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name/>
      <flavorname/>
      <value>200100000</value>
      <description>
        NeXT Inc.
      </description>
      <xref type="rfc" data="rfc5531"/>
    </record>
  </registry>
    
  <registry id="status">
    <title>RPC Authentication Status Numbers</title>
    <xref type="rfc" data="rfc5531"/>
    <registration_rule>First Come First Served</registration_rule>
    <note>For all RPC authentication flavor and authentication status numbers
to be used on the Internet, it is strongly advised that an
informational or standards-track RFC be published describing the
authentication mechanism behaviour and parameters.
    </note>
    <record>
      <name>AUTH_OK</name>
      <flavorname/>
      <value>0</value>
      <description>success/failed at remote end</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_BADCRED</name>
      <flavorname/>
      <value>1</value>
      <description>bad credential (seal broken)</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_REJECTEDCRED</name>
      <flavorname/>
      <value>2</value>
      <description>client must begin new session</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_BADVERF</name>
      <flavorname/>
      <value>3</value>
      <description>bad verifier (seal broken)</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_REJECTEDVERF</name>
      <flavorname/>
      <value>4</value>
      <description>verifier expired or replayed</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_TOOWEAK</name>
      <flavorname/>
      <value>5</value>
      <description>rejected for security reasons/failed locally</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_INVALIDRESP</name>
      <flavorname/>
      <value>6</value>
      <description>bogus response verifier</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_FAILED</name>
      <flavorname/>
      <value>7</value>
      <description>reason unknown/AUTH_KERB errors; deprecated. See [RFC2695]</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_KERB_GENERIC</name>
      <flavorname/>
      <value>8</value>
      <description>kerberos generic error</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_TIMEEXPIRE</name>
      <flavorname/>
      <value>9</value>
      <description>time of credential expired</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_TKT_FILE</name>
      <flavorname/>
      <value>10</value>
      <description>problem with ticket file</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_DECODE</name>
      <flavorname/>
      <value>11</value>
      <description>can't decode authenticator</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>AUTH_NET_ADDR</name>
      <flavorname/>
      <value>12</value>
      <description>wrong net address in ticket/RPCSEC_GSS GSS related errors</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>RPCSEC_GSS_CREDPROBLEM</name>
      <flavorname/>
      <value>13</value>
      <description>no credentials for user</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record>
      <name>RPCSEC_GSS_CTXPROBLEM</name>
      <flavorname/>
      <value>14</value>
      <description>problem with context</description>
      <xref type="rfc" data="rfc5531"/>
    </record>
    <record date="2015-12-16" updated="2015-12-17">
      <name>RPCSEC_GSS_INNER_CREDPROBLEM</name>
      <flavorname/>
      <value>15</value>
      <description>No credentials for multi-principal assertion inner context user</description>
      <xref type="rfc" data="rfc7861"/>
    </record>
    <record date="2015-12-16" updated="2015-12-17">
      <name>RPCSEC_GSS_LABEL_PROBLEM</name>
      <flavorname/>
      <value>16</value>
      <description>Problem with label assertion</description>
      <xref type="rfc" data="rfc7861"/>
    </record>
    <record date="2015-12-16" updated="2015-12-17">
      <name>RPCSEC_GSS_PRIVILEGE_PROBLEM</name>
      <flavorname/>
      <value>17</value>
      <description>Problem with structured privilege assertion</description>
      <xref type="rfc" data="rfc7861"/>
    </record>
    <record date="2015-12-16" updated="2015-12-17">
      <name>RPCSEC_GSS_UNKNOWN_MESSAGE</name>
      <flavorname/>
      <value>18</value>
      <description>Unknown structured privilege assertion</description>
      <xref type="rfc" data="rfc7861"/>
    </record>
  </registry>
 
  <registry id="rpcsec_gss-structured-privilege-names">
    <title>RPCSEC_GSS Structured Privilege Names Registry</title>
    <xref type="rfc" data="rfc7861"/>
    <registration_rule>Standards Action</registration_rule>
    <note>The structured privilege with a zero-length name and the fifteen 
additional lower case and mixed case permutations of each of 'EXPE' 
and 'PRIV' are also Reserved.
    </note>
    <record date="2016-11-02">
      <name>EXPE</name>
      <xref type="rfc" data="rfc7861"/>
      <contact/>
    </record>
    <record date="2016-11-02">
      <name>PRIV</name>
      <xref type="rfc" data="rfc7861"/>
      <contact/>
    </record>
    <record date="2016-11-02">
      <name>copy_to_auth</name>
      <xref type="rfc" data="rfc7862"/>
      <contact><xref type="person" data="WA_Adamson"/></contact>
    </record>
    <record date="2016-11-02">
      <name>copy_from_auth</name>
      <xref type="rfc" data="rfc7862"/>
      <contact><xref type="person" data="WA_Adamson"/></contact>
    </record>
    <record date="2016-11-02">
      <name>copy_confirm_auth</name>
      <xref type="rfc" data="rfc7862"/>
      <contact><xref type="person" data="WA_Adamson"/></contact>
    </record>
  </registry>

  <people>
    <person id="WA_Adamson">
      <name>William A.(Andy) Adamson</name>
      <uri>mailto:andros&amp;netapp.com</uri>
      <updated>2016-11-02</updated>
    </person>
  </people>
  
</registry>
