Kerberos: A Network Authentication System (The Addison-Wesley Networking Basics Series) - Softcover

Über die Autorin bzw. den Autor

Brian Tung is a computer scientist at the University of Southern California's Information Sciences Institute, where he is currently designing and implementing public key extensions to Kerberos. An acknowledged Kerberos expert, Mr. Tung is the author and keeper of the much-respected and often-visited Kerberos Web page The Moron's Guide to Kerberos.

Von der hinteren Coverseite

This handbook is a complete step-by-step guide to working with Kerberos, one of the most popular network authentication systems used by network administrators and programmers. Kerberos provides a clear explanation of network security principles and basic concepts, while taking you through each element of the Kerberos system.

Written by a network security professional who has worked with Kerberos extensively, this practical guide reveals the experience-based tips that will help you avoid pitfalls and maximize the system's capabilities. The text shows you how to obtain, install, optimize, use, and administer Kerberos, and covers important information for developing Kerberized applications.

You will find thorough explanations of such key topics as:

• Basic cryptography and hash functions
• Mutual authentication
• Establishing and changing passwords
• Manipulating credentials
• Installing the Key Distribution Center (KDC)
• Optimizing configuration
• Creating and administering a Kerberos database
• Adding, deleting, and modifying a principal
• Setting up cross-realm authentication
• Extensible function calls
• The GSS-API
• The various versions of Kerberos and their operational differences

In addition to these topics, Kerberos also discusses the effect of public key cryptography on the Kerberos protocol, its incorporation into Windows NT 5.0, and its use with smart cards and PC cards.

With this book in hand, the security, flexibility, and convenience of Kerberos is brought within easy reach of today's time-constrained administrator.