Kerberos权威指南,KerberosTheDefinitiveGuide。
Singlesign-onistheholygrailofnetworkadministration,andKerberosistheonlygameintown.Microsoft,byintegratingKerberosintoActiveDirectoryinWindows2000and2003,hasextendedthelargeorsmall.Kerberosmakesyournetworkmoresecureandmoreconvenientforusersbyprovidingasingleauthenticationsystemthatworksacrosstheentirenetwork.Oneusername;onepassword;oneloginisallyouneed.Fortunately,helpforadministratorsisontheway.ThisguideshowsyouhowtoimplementKerberosforsecureauthentication.Inadditiontocoveringthebasicprinciplesbehindcryptographicauthentication,itcoverseverythingfrombasicinstallationtoadvancedtopicslikecross-realmauthentication,defendingagainstattacksonKerberos,andtroubleshooting.InadditiontocoveringMicrosoft'sActiveDirectoryimplementation,Kerberos:TheDefinitiveGuidecoversbothmajorimplementationsofKerberosforUnixandLinux:MITandHeimdal.ItshowsyouhowtosetupMacOSXasaKerberosclient.ThebookalsocoversbothversionsoftheKerberosprotocolthatarestillinuse:Kerberos4(nowobsolete)andKerberos5,payingspecialattentiontotheintegrationbetweenthedifferentprotocols,andbetweenUnixandWindowsimplementations.
1