Kerberos

• Single sign-on authentication/authorization for enterprise

• Kerberos V5 in Microsoft Win 2000

• Avoids hassles of CAs, and PKI, securing private keys, and private key portability

• Concepts:

  • Realms: Each realm has a master Key Distribution Center (KDC): trusted third party
  • 3 components:
    • Authentication server (AS): responsible for authenticating user

Previous slide

Next slide

Back to first slide

View graphic version