Kerberos provides a centralize authentication server whose function is to authenticate users to servers and servers to users. In Kerberos Authentication server and database is used for client authentication. Kerberos run as a third-party trusted server known as the Key Distribution Center (KDC). Each user and service on the network is a principal.
The main components of Kerberos are:
- Authentication Server (AS):
The Authentication Server performs the initial authentication and ticket for Ticket Granting Service.
The Authentication Server verifies access rightd of users in database.
- Ticket Granting Server (TGS):
The Ticket Granting Server issues the ticket for the Server
User logon and request services on host. Thus user request for ticket-granting-service.
Authentication Server verifies user’s access right using database and then gives ticket-granting-ticket and session key. Results are encrypted using Password of user.
Decryption of message is done using the password then send the ticket to Ticket Granting Server. The Ticket contain authenticators like user name and network address.
Ticket Granting Server decrypts the ticket send by User and authenticator verifies the request then creates the ticket for requesting services from the Server.
User send the Ticket and Authenticator to the Server.
Server verifies the Ticket and authenticators then generate the access to the service. After this User can access the services.
- Indoor Navigation using WiFi
- Transport Layer Security (TLS)
- Network Protocols
- Network Safeguarding
- Implementing Salting
- Securing wireless and mobile devices
- Host Data Safeguarding
- Grid Computing
- Areas of Network Management
- Difference between Secure Socket Layer (SSL) and Secure Electronic Transaction (SET)
- Network News Transfer Protocol (NNTP)
- Most asked Computer Science Subjects Interview Questions in Amazon, Microsoft, Flipkart
- Difference between Browsing and Surfing
- Difference between Delta Modulation (DM) and Differential Pulse Code Modulation (DPCM)
If you like GeeksforGeeks and would like to contribute, you can also write an article using contribute.geeksforgeeks.org or mail your article to firstname.lastname@example.org. See your article appearing on the GeeksforGeeks main page and help other Geeks.
Please Improve this article if you find anything incorrect by clicking on the "Improve Article" button below.