Kerberos: The Definitive Guide

Customers who bought this, also bought: Mac OS X Internals: A Systems Approach Apple Training Series: Mac OS X Support Essentials Cocoa® Programming for Mac® OS X, 3rd Edition

by: Jason Garman

On-line Price: $52.00 (includes GST) Paperback package 282 20%Off Retail Price You save: $13.00 _____________________ N.Sydney : In Stock	Retail Price: $65.00 Publisher: O'REILLY,2003/08/30 Category: COMPUTER SECURITY Level: I/A ISBN: 0596004036 ISBN13: 9780596004033
Add to Shopping Cart

Single sign-on is the holy grail of network administration, and Kerberos is the only game in town. Microsoft, by integrating Kerberos into Active Directory in Windows 2000 and 2003, has extended the reach of Kerberos to all networks large or small. Kerberos: The Definitive Guide shows you how to implement Kerberos on Windows and Unix systems for secure authentication. In addition to covering the basic principles behind cryptographic authentication, it covers everything from basic installation to advanced topics like cross-realm authentication, defending against attacks on Kerberos, and troubleshooting.

Table of Contents

Preface

  1. Introduction

          Origins

          What Is Kerberos?

          Goals

          Evolution

          Other Products

  2. Pieces of the Puzzle

          The Three As

          Directories

          Privacy and Integrity

          Kerberos Terminology and Concepts

          Putting the Pieces Together

  3. Protocols

          The Needham-Schroeder Protocol

          Kerberos 4

          Kerberos 5

          The Alphabet Soup of Kerberos-Related Protocols

  4. Implementation

          The Basic Steps

          Planning Your Installation

          Before You Begin

          KDC Installation

          DNS and Kerberos

          Client and Application Server Installation

  5. Troubleshooting

          A Quick Decision Tree

          Debugging Tools

          Errors and Solutions

  6. Security

          Kerberos Attacks

          Protocol Security Issues

          Security Solutions

          Protecting Your KDC

          Firewalls, NAT, and Kerberos

          Auditing

  7. Applications

          What Does Kerberos Support Mean?

          Services and Keytabs

          Transparent Kerberos Login with PAM

          Mac OS X and the Login Window

          Kerberos and Web-Based Applications

          The Simple Authentication and Security Layer (SASL)

          Kerberos-Enabled Server Packages

          Kerberos-Enabled Client Packages

          More Kerberos-Enabled Packages

  8. Advanced Topics

          Cross-Realm Authentication

          Using Kerberos 4 Services with Kerberos 5

          Windows Issues

          Windows and Unix Interoperability

  9. Case Study

          The Organization

          Planning

          Implementation

  10. Kerberos Futures

          Public Key Extensions

          Smart Cards

          Better Encryption

          Kerberos Referrals

          Web Services

  Appendix: Administration Reference

  Index