Kerberos

From Joomla! Authentication Tools (JAuthTools)

Kerberos is a technology developed by MIT to allow for mutual authentication and ticket based authentication systems and is considered a standard authentication system for most services, computers and users. Kerberos is implemented as the main form of authentication in Microsoft's Active Directory system and eDirectory also provides Kerberos functionality.

Contents 1 Kerberos Guides 2 Other Resources 2.1 Web browsers 2.2 IIS 2.3 Kerberos and Apache guides 2.4 Kerberos Troubleshooting 2.5 Scott Lowe on Kerberos

[edit] Kerberos Guides

• Configuring Apache To Authenticate PHP Documents
• Kerberos and SLES9
• Kerberos and Debian
• Kerberos Troubleshooting
• Browser Support

[edit] Other Resources

These are alternate resources that may be useful in setting up Kerberos, mostly aimed at Apache

[edit] Web browsers

• Kerberos and Firefox

[edit] IIS

• Integrated Windows Authentication (Wikipedia)
• IIS Web site authentication in Windows Server 2003 (Look for "Integrated Windows Authentication")
• IE not correctly identifying sites in the intranet (This can cause token errors in Apache)
• Enabling Integrated Windows Authentication in IE (Required to avoid password prompts)

[edit] Kerberos and Apache guides

• Tutorial: Using mod_auth_kerb with Windows 2000/2003 as KDC (This is one of the original tutorials that I followed in the SLES9 build)
• Kerberos based SSO with Apache
• Configure Apache on Linux for Kerberos Authentication

[edit] Kerberos Troubleshooting

• Common Kerberos related errors in Windows 2000 (Microsoft Knowledge Base Article)
• Preauthentication errors with keys and Windows 2003 SP1 (also related to key version number issues)
• Google Groups thread on comp.protocols.kerberos about issues with Windows 2003 SP1 and ktpass.exe
• OpenAFS: Windows 2003 Service Keys Info (has some AFS related notes but a lot of useful information)

[edit] Scott Lowe on Kerberos

This man has lots of really useful Kerberos related goodies and each page has useful comments that can help you out with a multitude of little issues. Some of it covers more than just Kerberos and moves into what you need to do to get Linux to play nicely, but lots of the information is useful even if only in part.

• Complete Linux AD Authentication Details (Windows 2000 and Windows 2003 pre-R2)
• Linux AD Integration (Windows 2003 R2+)
• More on Kerberos Authentication against Active Directory
• ESX integration with Active Directory