Kerberos

Kerberos

1. Principles

   • A ticket: acquired by a client from the authentication server, and sent to the application server as part of the request for a service.
   • An authenticator: constructed by the client, is sent to the application server along with the ticket, and is used by the application server to verify that the request was sent by the client to whom the ticket was issued.

2. What is Kerberos?

   • (1). A computer network authentication protocol..
     • (2). That works on the basis of 'tickets'..
       • (3). Allowing nodes to communicate over a non-secure network..
         • (4). to prove their identity to one another in a secure manner.

3. Kerberos realm is an environment in which:

   • 1. The Kerberos server must have the user ID (UID) and hashed password of all participating users in its database. All users are registered with the Kerberos server.
   • 2. The Kerberos server must share a secret key with each server. All servers are registered with the Kerberos server