IT Toolbox
Terme informatique

Kerberos

A par tickets authentication protocol widely used in Active Directory domains.

Windows
TopicActive Directory →
View my favorites

Simple definition

Kerberos allows an authenticated user to access multiple services without returning his password each time.

Technical definition

The key distribution centre delivers an Ticket, and then service tickets. The protocol depends heavily on the DNS, service names and timing of the time.

What is it used for ?

Windows built-in authentication and secure access to domain resources.

Practical example

After login, the user accesses file sharing via a ticket Kerberos.

Common issues

  • Time-scaling too large
  • SPN absent or duplicated
  • DNS incorrect
  • Involuntary return to NTLM

Active Directory (AD) · Domain Controller · DNS · LDAP · GPO

Key takeaway: This entry explains the general operation of the term. Exact settings may vary depending on software, vendors and environments.

♡ 0