Kerberos Kerberos is an authentication and authorization protocol ■ Kerberos uses a trusted third party authentication service that enables clients and servers to establish authenticated and secure communication. ■ Kerberos provides single sign-on capability using a centralized repository of accounts. ■ Relies entirely on symmetric cryptography Kerberos provides an audit trail of usage. -How?You should be able to answer after this lecture Developed at MIT:two versions,Version 4 and Version 5 (specified as RFC1510) http://web.mit.edu/kerberos/www Used in many systems,e.g.,Windows 2000 and later as default authentication protocol In Greek mythology,Kerberos means a many headed dog, commonly three,perhaps with a serpent's tail,the guardian of the entrance of Hades." -the modern Kerberos was intended to have three components to guard a network's gate:authentication,accounting,and audit. 33 Kerberos  Kerberos is an authentication and authorization protocol  Kerberos uses a trusted third party authentication service that enables clients and servers to establish authenticated and secure communication.  Kerberos provides single sign-on capability using a centralized repository of accounts.  Relies entirely on symmetric cryptography  Kerberos provides an audit trail of usage. ─ How? You should be able to answer after this lecture.  Developed at MIT: two versions, Version 4 and Version 5 (specified as RFC1510)  http://web.mit.edu/kerberos/www  Used in many systems, e.g., Windows 2000 and later as default authentication protocol  In Greek mythology, Kerberos means a many headed dog, commonly three, perhaps with a serpent's tail, the guardian of the entrance of Hades." ─ the modern Kerberos was intended to have three components to guard a network's gate: authentication, accounting, and audit