Announcement

Collapse
No announcement yet.

kerberos

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • kerberos

    Hello everyone,

    I want to learn about how kerberos protocol works, and comparing it with Windows NTLM based authenticaton. Are there any good documents or tutorials to recommend?

    thanks in advance,
    George

  • #2
    Re: kerberos

    NTLM is much less secure then Kerberos.
    please start here:
    Kerberos explained
    Windows Security: Kerberos Authentication
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: kerberos

      Cool, Dumber! You find better than Google.

      Originally posted by Dumber View Post
      NTLM is much less secure then Kerberos.
      please start here:
      Kerberos explained
      Windows Security: Kerberos Authentication
      regards,
      George

      Comment


      • #4
        Re: kerberos

        And still I use
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: kerberos

          Hi Dumber,
          Originally posted by Dumber View Post
          And still I use
          Do you have any good stuff to recommend which compares NTLM and Kerberos? My concern is like, whether NTLM supports delegation as good as Kerberos. Thanks.

          regards,
          George

          Comment


          • #6
            Re: kerberos

            Couple of articles:

            Kerberos vs NTLM - http://windowsitpro.com/article/arti...s-vs-ntlm.html

            EE thread on a comparison - http://www.experts-exchange.com/OS/M..._22974868.html

            Kerberos advantages (seems to require logging in to view) - http://searchenterprisedesktop.techt...09961,00.html#
            Gareth Howells

            BSc (Hons), MBCS, MCP, MCDST, ICCE

            Any advice is given in good faith and without warranty.

            Please give reputation points if somebody has helped you.

            "For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

            "Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.

            Comment


            • #7
              Re: kerberos

              Thanks gforceindustries,

              Originally posted by gforceindustries View Post
              Couple of articles:

              Kerberos vs NTLM - http://windowsitpro.com/article/arti...s-vs-ntlm.html

              EE thread on a comparison - http://www.experts-exchange.com/OS/M..._22974868.html

              Kerberos advantages (seems to require logging in to view) - http://searchenterprisedesktop.techt...09961,00.html#
              1. I can not see any content from the document you recommended on EE, seems the content is not free (needs to pay in order to be membership)?

              2. For the 3rd document you recommended, even if I login with my account, I cannot see any content. Any ideas? So strange. All I can see is "Enterprise Desktop News:" but no content and some Ads in the bottom and on the right sides.

              regards,
              George

              Comment


              • #8
                Re: kerberos

                Welcome
                Gareth Howells

                BSc (Hons), MBCS, MCP, MCDST, ICCE

                Any advice is given in good faith and without warranty.

                Please give reputation points if somebody has helped you.

                "For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

                "Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.

                Comment


                • #9
                  Re: kerberos

                  Sorry gforceindustries, but do you have any comments or answers to my questions below? I quote again here.

                  Originally posted by gforceindustries View Post
                  Welcome
                  --------------------
                  1. I can not see any content from the document you recommended on EE, seems the content is not free (needs to pay in order to be membership)?

                  2. For the 3rd document you recommended, even if I login with my account, I cannot see any content. Any ideas? So strange. All I can see is "Enterprise Desktop News:" but no content and some Ads in the bottom and on the right sides.
                  --------------------

                  regards,
                  George

                  Comment


                  • #10
                    Re: kerberos

                    Originally posted by George2 View Post
                    1. I can not see any content from the document you recommended on EE, seems the content is not free (needs to pay in order to be membership)?

                    2. For the 3rd document you recommended, even if I login with my account, I cannot see any content. Any ideas? So strange. All I can see is "Enterprise Desktop News:" but no content and some Ads in the bottom and on the right sides
                    1) Free trial, or Google cache.

                    2) Again, try Google cache.
                    Gareth Howells

                    BSc (Hons), MBCS, MCP, MCDST, ICCE

                    Any advice is given in good faith and without warranty.

                    Please give reputation points if somebody has helped you.

                    "For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

                    "Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.

                    Comment


                    • #11
                      Re: kerberos

                      Hi gforceindustries,

                      Originally posted by gforceindustries View Post
                      1) Free trial, or Google cache.

                      2) Again, try Google cache.
                      I have tried no content for Google cache. Could you double check please?

                      regards,
                      George

                      Comment


                      • #12
                        Re: kerberos

                        Works fine for me... which site are you talking about?
                        Gareth Howells

                        BSc (Hons), MBCS, MCP, MCDST, ICCE

                        Any advice is given in good faith and without warranty.

                        Please give reputation points if somebody has helped you.

                        "For by now I could have stretched out my hand and struck you and your people with a plague that would have wiped you off the Earth." (Exodus 9:15) - I could kill you with my thumb.

                        "Everything that lives and moves will be food for you." (Genesis 9:3) - For every animal you don't eat, I'm going to eat three.

                        Comment


                        • #13
                          Re: kerberos

                          Try this one and click on the link provided by google
                          http://www.google.nl/search?source=i...ken&meta=lr%3D
                          Marcel
                          Technical Consultant
                          Netherlands
                          http://www.phetios.com
                          http://blog.nessus.nl

                          MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                          "No matter how secure, there is always the human factor."

                          "Enjoy life today, tomorrow may never come."
                          "If you're going through hell, keep going. ~Winston Churchill"

                          Comment


                          • #14
                            Re: kerberos

                            Hi Dumber,

                            Can you open this link? When I open this link the content is empty.

                            http://searchwindowssecurity.techtar...009961,00.html

                            Originally posted by Dumber View Post
                            Try this one and click on the link provided by google
                            http://www.google.nl/search?source=i...ken&meta=lr%3D
                            regards,
                            George

                            Comment


                            • #15
                              Re: kerberos

                              For this one, gforceindustries, the content is empty. Any ideas?

                              http://searchenterprisedesktop.techt...009961,00.html

                              Originally posted by gforceindustries View Post
                              Works fine for me... which site are you talking about?
                              regards,
                              George

                              Comment

                              Working...
                              X