Explain Kerberos like I'm 5
9 likes3,839 views
The document outlines the Kerberos authentication process for a web service, detailing the roles of the Key Distribution Center (KDC), Ticket Granting Server (TGS), and the necessary requests and tickets involved. It describes the steps required for a client to authenticate with a server using plaintext requests, session keys, and authenticators that include user IDs, timestamps, and service IDs. The emphasis is on the flow of information among the client, TGS, and HTTP service to establish a secure connection.
Explain Kerberos like I'm 5
- 1. KDC Clients Key Distribution Center Authentication You Server HTTP Ticket Granting Server service Kerberos Realm Monday, April 1, 13
- 2. Authentication You Server plaintext request your ID, Ticket Granting Server ID, IP address, lifetime Monday, April 1, 13
- 3. Authentication You Server user ID lookup in KDC Monday, April 1, 13
- 4. Authentication You Server Ticket Granting Server Session Key HTTP service’s ID, timestamp, lifetime, TGS Session Key Ticket Granting Ticket your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key Monday, April 1, 13
- 5. Authentication You Server Ticket Granting Server Session Key Your Secret Key Ticket Granting Ticket Ticket Granting Server Secret Key Monday, April 1, 13
- 6. plaintext request HTTP Service ID and lifetime Ticket Granting You Server Authenticator your ID and timestamp Ticket Granting Ticket your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key Monday, April 1, 13
- 7. Ticket Granting You Server user ID lookup in KDC Monday, April 1, 13
- 8. plaintext request Ticket Granting You Server Authenticator Ticket Granting Server Session Key Ticket Granting Ticket Ticket Granting Server Secret Key Monday, April 1, 13
- 9. Ticket Granting You Server HTTP Service Session Key your client ID and timestamp Ticket for HTTP Service your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key Monday, April 1, 13
- 10. Ticket Granting You Server HTTP Service Session Key Ticket Granting Server Session Key Ticket for HTTP Service HTTP Service Secret Key Monday, April 1, 13
- 11. Ticket for HTTP Service your ID, HTTP service ID, IP address, You timestamp, lifetime, and the TGS Session Key HTTP service Authenticator your client ID and timestamp Monday, April 1, 13
- 12. Ticket for HTTP Service HTTP Service Secret Key You HTTP service Authenticator HTTP Service Session Key Monday, April 1, 13
- 13. You Authenticator HTTP HTTP service ID and timestamp service Monday, April 1, 13
- 14. You Authenticator HTTP HTTP Service Session Key service Monday, April 1, 13
- 15. You HTTP service Monday, April 1, 13