Explain Kerberos like I'm 5
15
Authentication Server Ticket Granting Server Key Distribution Center Kerberos Realm HTTP service You KDC Clients Monday, April 1, 13
-
Upload
lynn-root -
Category
Technology
-
view
1.185 -
download
2
description
Slides are meant to be paired with the blog post: http://www.roguelynn.com/words/explain-like-im-5-kerberos
Transcript of Explain Kerberos like I'm 5
Authentication Server
Ticket GrantingServer
Key Distribution Center
Kerberos Realm
HTTPservice
You
KDC Clients
Monday, April 1, 13
your ID, Ticket Granting Server ID, IP address, lifetime
YouAuthentication
Server
plaintext request
Monday, April 1, 13
user IDlookup in KDC
YouAuthentication
Server
Monday, April 1, 13
Ticket Granting Server Session Key
Ticket Granting Ticket
HTTP service’s ID, timestamp, lifetime, TGS Session Key
your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key
YouAuthentication
Server
Monday, April 1, 13
Ticket Granting Server Session Key
Ticket Granting Ticket
Your Secret Key
Ticket Granting Server Secret Key
YouAuthentication
Server
Monday, April 1, 13
Authenticator
Ticket Granting Ticket
your ID and timestamp
your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key
You
HTTP Service ID and lifetimeplaintext request
Ticket GrantingServer
Monday, April 1, 13
You
user IDlookup in KDC
Ticket GrantingServer
Monday, April 1, 13
Authenticator
Ticket Granting TicketTicket Granting Server Secret Key
Ticket Granting Server Session Key
YouTicket Granting
Server
plaintext request
Monday, April 1, 13
HTTP Service Session Key
Ticket for HTTP Service
your client ID and timestamp
YouTicket Granting
Server
your ID, HTTP service ID, IP address, timestamp, lifetime, and the TGS Session Key
Monday, April 1, 13
HTTP Service Session Key
Ticket for HTTP ServiceHTTP Service Secret Key
Ticket Granting Server Session Key
YouTicket Granting
Server
Monday, April 1, 13
Ticket for HTTP Serviceyour ID, HTTP service ID, IP address,
timestamp, lifetime, and the TGS Session Key
Authenticatoryour client ID and timestamp
HTTPservice
You
Monday, April 1, 13
Authenticator
HTTP Service Secret Key
HTTP Service Session Key
HTTPservice
You
Ticket for HTTP Service
Monday, April 1, 13
AuthenticatorHTTP service ID and timestamp
You
HTTPservice
Monday, April 1, 13
AuthenticatorYou
HTTPservice
HTTP Service Session Key
Monday, April 1, 13
You
HTTPservice
Monday, April 1, 13
