Table of Contents

Preface 1. Introduction Origins What Is Kerberos? Goals Evolution Other Products 2. Pieces of the Puzzle The Three As Directories Privacy and Integrity Kerberos Terminology and Concepts Putting the Pieces Together 3. Protocols The Needham-Schroeder Protocol Kerberos 4 Kerberos 5 The Alphabet Soup of Kerberos-Related Protocols 4. Implementation The Basic Steps Planning Your Installation Before You Begin KDC Installation DNS and Kerberos Client and Application Server Installation 5. Troubleshooting A Quick Decision Tree Debugging Tools Errors and Solutions 6. Security Kerberos Attacks Protocol Security Issues Security Solutions Protecting Your KDC Firewalls, NAT, and Kerberos Auditing 7. Applications What Does Kerberos Support Mean? Services and Keytabs Transparent Kerberos Login with PAM Mac OS X and the Login Window Kerberos and Web-Based Applications The Simple Authentication and Security Layer (SASL) Kerberos-Enabled Server Packages Kerberos-Enabled Client Packages More Kerberos-Enabled Packages 8. Advanced Topics Cross-Realm Authentication Using Kerberos 4 Services with Kerberos 5 Windows Issues Windows and Unix Interoperability 9. Case Study The Organization Planning Implementation 10. Kerberos Futures Public Key Extensions Smart Cards Better Encryption Kerberos Referrals Web Services Appendix: Administration Reference Index

About the Author

Jason Garman has considerable experience with Kerberos in both Unix and Windows environments