Centralized Authenitcation with Kerberos 5, Part I.

Wachsmann, A.

Technical Information Center Oak Ridge Tennessee

关键词: Authentication;    Management tools;    Data transmission systems;    Computer communications;    Management planning and control;   

RP-ID  :  DE2004826992

学科分类：工程和技术（综合）

美国|英语

来源: National Technical Reports Library

【 摘 要 】

Account administration in a distributed Unix/Linux environment can become very complicated and messy if done by hand. Large sites use special tools to deal with this problem. I will describe how even very small installations like your three computer network at home can take advantage of the very same tools. The problem in a distributed environment is that password and shadow files need to be changed individually on each machine if an account change occurs. Account changes include: password change, addition/removal of accounts, name change of an account (UID/GID changes are a big problem in any case), additional or removed login privileges to a (group of) computer(s), etc. In this article, I will show how Kerberos 5 solves the authentication problem in a distributed computing environment. A second article will describe a solution for the authorization problem.