oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

a note about version 4/5

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3468 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
1997-09-10 21:59:30 +00:00
parent 3b517dbc77
commit 3336ffbea1
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
doc/whatis.texi
View File

@@ -38,15 +38,20 @@ services can authenticate each other.
@global@let@sub=@xsub
@end tex
@quotation
@strong{Note:} This discussion is about Kerberos version 4, but version
5 works similarly.
@end quotation
In Kerberos, principals use @dfn{tickets} to prove that they are who
they claim to be. In the following example, @var{A} is the initiator of
the authentication exchange, usually a user, and @var{B} is the service
that @var{A} wishes to use.
To obtain a ticket for a specific service, @var{A} sends a ticket
request to the kerberos server. The request basically contains @var{A}'s
and @var{B}'s names. The kerberos server checks that both @var{A} and
@var{B} are valid principals.
request to the kerberos server. The request contains @var{A}'s and
@var{B}'s names (along with some other fields). The kerberos server
checks that both @var{A} and @var{B} are valid principals.
Having verified the validity of the principals, it creates a packet
containing @var{A}'s and @var{B}'s names, @var{A}'s network address
@@ -134,5 +139,5 @@ A less technical description can be found in @cite{Designing an
Authentication System: a Dialogue in Four Scenes} by Bill Bryant, also
from 1988.
These and several other documents can be found on our web-page at
These documents can be found on our web-page at
@url{http://www.pdc.kth.se/kth-krb/}.