Kerberos

From Authentication Tools for Joomla! (JAuthTools)

(Difference between revisions)
Jump to: navigation, search
(Kerberos Guides)
Line 4: Line 4:
*[[Kerberos/Configuring Apache To Authenticate PHP Documents|Configuring Apache To Authenticate PHP Documents]]
*[[Kerberos/Configuring Apache To Authenticate PHP Documents|Configuring Apache To Authenticate PHP Documents]]
*[[Kerberos/Kerberos and SLES9|Kerberos and SLES9]]
*[[Kerberos/Kerberos and SLES9|Kerberos and SLES9]]
 +
*[[Kerberos/Kerberos and Debian|Kerberos and Debian]]
*[[Kerberos/Troubleshooting|Kerberos Troubleshooting]]
*[[Kerberos/Troubleshooting|Kerberos Troubleshooting]]
 +
==Other Resources==
==Other Resources==
-
*[http://www.grolmsnet.de/kerbtut/ http://www.grolmsnet.de/kerbtut/]
+
These are alternate resources that may be useful in setting up Kerberos, mostly aimed at Apache
-
*[http://sl.mvps.org/docs/LinuxApacheKerberosAD.htm http://sl.mvps.org/docs/LinuxApacheKerberosAD.htm]
+
 
-
*[http://www.tkk.fi/cc/docs/kerberos/sso.html http://www.tkk.fi/cc/docs/kerberos/sso.html]
+
=== Web browsers ===
-
*[http://support.microsoft.com/kb/230476 http://support.microsoft.com/kb/230476]
+
* [http://grolmsnet.de/kerbtut/firefox.html Kerberos and Firefox]
-
*[http://support.microsoft.com/kb/919557 http://support.microsoft.com/kb/919557]
+
 
-
*[http://blog.scottlowe.org/2006/08/10/kerberos-based-sso-with-apache/ http://blog.scottlowe.org/2006/08/10/kerberos-based-sso-with-apache/]
+
=== IIS ===
-
*[http://blog.scottlowe.org/2006/05/01/esx-server-integration-with-active-directory/ http://blog.scottlowe.org/2006/05/01/esx-server-integration-with-active-directory/]
+
* [http://en.wikipedia.org/wiki/Integrated_Windows_Authentication Integrated Windows Authentication] (Wikipedia)
-
*[http://blog.scottlowe.org/2006/08/21/more-on-kerberos-authentication-against-active-directory/ http://blog.scottlowe.org/2006/08/21/more-on-kerberos-authentication-against-active-directory/]
+
* [http://support.microsoft.com/kb/324274 IIS Web site authentication in Windows Server 2003] (Look for "Integrated Windows Authentication")
-
*[http://blog.scottlowe.org/2005/12/22/complete-linux-ad-authentication-details/ http://blog.scottlowe.org/2005/12/22/complete-linux-ad-authentication-details/]
+
* [http://support.microsoft.com/kb/303650 IE not correctly identifying sites in the intranet] (This can cause token errors in Apache)
-
*[http://blog.scottlowe.org/2007/01/15/linux-ad-integration-version-4/ http://blog.scottlowe.org/2007/01/15/linux-ad-integration-version-4/]
+
* [http://msdn.microsoft.com/en-us/library/ms998358.aspx Enabling Integrated Windows Authentication in IE] (Required to avoid password prompts)
 +
 
 +
=== Kerberos and Apache guides ===
 +
*[http://www.grolmsnet.de/kerbtut/ Tutorial: Using mod_auth_kerb with Windows 2000/2003 as KDC] (This is one of the original tutorials that I followed in the SLES9 build)
 +
*[http://blog.scottlowe.org/2006/08/10/kerberos-based-sso-with-apache/ Kerberos based SSO with Apache]
 +
*[http://sl.mvps.org/docs/LinuxApacheKerberosAD.htm Configure Apache on Linux for Kerberos Authentication]
 +
 
 +
=== Kerberos Troubleshooting ===
 +
*[http://support.microsoft.com/kb/230476 Common Kerberos related errors in Windows 2000] (Microsoft Knowledge Base Article)
 +
*[http://support.microsoft.com/kb/919557 Preauthentication errors with keys and Windows 2003 SP1] (also related to key version number issues)
 +
=== Scott Lowe on Kerberos ===
 +
This man has lots of really useful Kerberos related goodies and each page has useful comments that can help you out with a multitude of little issues. Some of it covers more than just Kerberos and moves into what you need to do to get Linux to play nicely, but lots of the information is useful even if only in part.
 +
*[http://blog.scottlowe.org/2005/12/22/complete-linux-ad-authentication-details/ Complete Linux AD Authentication Details] (Windows 2000 and Windows 2003 pre-R2)
 +
*[http://blog.scottlowe.org/2007/01/15/linux-ad-integration-version-4/ Linux AD Integration] (Windows 2003 R2+)
 +
*[http://blog.scottlowe.org/2006/08/21/more-on-kerberos-authentication-against-active-directory/ More on Kerberos Authentication against Active Directory]
 +
*[http://blog.scottlowe.org/2006/05/01/esx-server-integration-with-active-directory/ ESX integration with Active Directory]
[[Category:Kerberos]]
[[Category:Kerberos]]

Revision as of 00:19, 28 October 2008

Kerberos is a technology developed by MIT to allow for mutual authentication and ticket based authentication systems and is considered a standard authentication system for most services, computers and users. Kerberos is implemented as the main form of authentication in Microsoft's Active Directory system and eDirectory also provides Kerberos functionality.

Contents

Kerberos Guides


Other Resources

These are alternate resources that may be useful in setting up Kerberos, mostly aimed at Apache

Web browsers

IIS

Kerberos and Apache guides

Kerberos Troubleshooting

Scott Lowe on Kerberos

This man has lots of really useful Kerberos related goodies and each page has useful comments that can help you out with a multitude of little issues. Some of it covers more than just Kerberos and moves into what you need to do to get Linux to play nicely, but lots of the information is useful even if only in part.

Personal tools