Collaborate Disseminate
The situation is that I have two domains (Domain A and Domain B) that live on separate networks. I need to allow users in B to be authenticated with integrated windows authentication (IWA) when they hit a web app deployed on … Continue reading Is a Kerberos ticket valid with only one-way external trust between domains?
Is Radius just a better version of Kerberos? I can’t find anything about this.
If you set up a Radius server in a modern network do you need Kerberos at all?
Continue reading What’s the difference between Radius and Kerberos?
I know it is possible to integrate Linux/SSH logins with a Windows AD by using GSSAPI (Kerberos) authentication instead of the classic ssh keys and/or passwords.
However, I have been unable to find much information about the security of t… Continue reading How secure is GSSAPI single-signon over SSH?
Can anyone describe/outline the relative merits of using Kerberos or LDAP for authentication in a large heterogeneous environment?
And
Can we switch between them transparently?
Continue reading Kerberos vs. LDAP for authentication — which one is more secure
I’m trying to audit kerberos passwords. The available formats are des3-hmac-sha1 and des-cbc-crc but I cannot find a possibility/a tool to crack them. For other hash-types I used John the Ripper, but it seems to fail in this … Continue reading cracking krb5 passwords (des3-hmac-sha1 and des-cbc-crc )
I’m trying to audit kerberos passwords. The available formats are des3-hmac-sha1 and des-cbc-crc but I cannot find a possibility/a tool to crack them. For other hash-types I used John the Ripper, but it seems to fail in this … Continue reading cracking krb5 passwords (des3-hmac-sha1 and des-cbc-crc )
I was just reading up on Kerberos and realized that the lifetime of a master ticket called the TGT(ticket granting ticket) is 25 hours. Is there any particular reason behind this choice of lifetime?