Kerberos Authentication
Active directory authentication process using the Kerberos protocol for user authentication.
KDC perform two part of service Authentication Service (AS) and Ticket Granting Service (TGS)
Kerberos Authentication Process
- User submits the credential
- After verifying the credential, Authentication Service (AS) grants Ticket Granting Ticket (TGT)
- User gives TGT to TGS
- TGS grant the session ticket
- User gives the session ticket to the target server
Access Control List
DCAL (Discretionary Access Control List)- It specifies the user accounts, groups that can access a particular object.
SCAL (System Access Control List)- It is used for logging or auditing resource access. In SACL audit records are generated when an access attempt fails or succeeds or both.
Comments
Post a Comment