A GSSAPI principal requires credentials as proof of identity.
一个GSSAPI主体要求凭证作为身份的证据。
Normally, a TGT is acquired for GSSAPI user principals and not service principals.
通常，TGT是为GSSAPI用户主体而不是为服务主体而获取的。
A GSSAPI service principal may also initiate context, in which case it requires a TGT.
一个GSSAPI服务主体还可以初始化上下文，这时需要TGT。
Hence, a GSSAPI application must provide for credential acquisition before invoking GSSAPI.
因此，一个GSSAPI应用程序在调用GSSAPI之前必须提供凭证获取。
A service principal, on the other hand, requires just its secret key to accept GSSAPI contexts.
另一方面，一个服务主体所要求的仅是接受GSSAPI上下文的密钥。
Common authentication methods include password, public key, keyboard-interactive, GSSAPI, SecureID, and PAM.
常见的身份验证方法包括密码、公钥、键盘交互、GSSAPI、SecureID和PAM。
GSSAPI offers a standard generic interface through which a secure application can use multiple underlying security mechanisms.
GSSAPI提供了一个标准的通用接口，通过该接口安全应用程序可以使用多种底层的安全机制。
However, a Telnet program written to the GSSAPI interface can use Kerberos as well as other security mechanisms supported by GSSAPI.
然而，使用GSSAPI接口编写的Telnet程序不但可以使用Kerberos，还可以使用GSSAPI所支持的其它的安全机制。
GSSAPI specifications do not prescribe how a principal acquires credentials, and implementations typically do not provide such a feature.
GSSAPI规范没有指定主体是如何获取凭证的，而且实现典型的也没有提供这样的功能。
The main benefit of GSSAPI is that a secure application developed using GSSAPI can work over different security mechanisms without modification.
GSSAPI的主要的优点是：一个使用GSSAPI开发的安全应用程序无需修改就可以在不同的安全机制上工作。
GSSAPI lacks a login interface for acquiring credentials; it merely queries the underlying security mechanism for credentials for the calling principal.
GSSAPI缺少一个获取凭证的登录接口；它仅在底层的安全机制中查询调用主体的凭证。
The secret key of a service principal can be added to the JAAS Subject, furthering the objective of using the JAAS Subject as a central repository of GSSAPI credentials.
可把服务主体的密钥加给JAASSubject，强化将JAAS Subject用做一个GSSAPI凭证的中央资源库的目标。
The secret key of a service principal can be added to the JAAS Subject, furthering the objective of using the JAAS Subject as a central repository of GSSAPI credentials.
可把服务主体的密钥加给JAASSubject，强化将JAAS Subject用做一个GSSAPI凭证的中央资源库的目标。
应用推荐