
The central voice for Linux and Open Source security news

Welcome!

Sign up!

EnGarde Community

Polls

How would you rate the importance of default settings in security?

	Critical
	Very Important
	Important
	Useful
	Not important

Advisories

Community

Linux Events

Linux User Groups

Link to Us

Security Center

Book Reviews

Security Dictionary

Security Tips

SELinux

White Papers

Featured Blogs

Emily Ratliff: OS Security

DanWalsh LiveJournal

Security Bloggers Network

Latest Newsletters

Linux Advisory Watch: July 4th, 2008

Linux Security Week: June 30th, 2008

LinuxSecurity Newsletters

RSS Feeds

Get the LinuxSecurity news you want faster with RSS

Kerberos Infrastructure HOWTO

V. Alex Brennen

<vab@cryptnet.net>

2004-05-29

Revision History
Revision 2.0.0	2004-05-28	Revised by: VAB
Conversion to DocBook XML. General Content Updates, including incorporation of Technical and Metadata/Markup Reviews.
Revision 1.0.3	2003-04-01	Revised by: VAB
Minor Updates, Minor Corrections, Additional links added.
Revision 1.0.2	2002-09-13	Revised by: VAB
Minor Updates, Minor Corrections, Added 8.6, Additional links added.
Revision 1.0.1	2002-07-15	Revised by: VAB
Minor Updates, Fixes.
Revision 1.0.0	2002-06-13	Revised by: VAB
Initial Release.

This document describes the design and configuration of a Kerberos infrastructure for handling authentication with GNU/Linux. It details steps for a best practices method of setting up servers, Kerberos software, conversion of legacy systems, and answers frequently asked questions.

Table of Contents

1. About this Document

1.1. General Information
1.2. Translations
1.3. Credits and Contributors
1.4. Feedback

2. An Overview of a Kerberos Infrastructure

2.1. An Introduction to Kerberos
2.2. The Benefits of Kerberos
2.3. How Kerberos Works
2.4. Compromise of Kerberos Infrastructure

3. Installing and Configuration

3.1. General Machine Configuration Overview
3.2. Hardware
3.3. GNU/Linux Installation
3.4. Choosing A Realm
3.5. Kerberos Software Configuration
3.6. Principal Creation

4. Time Synchronization

4.1. The Importance of Time Synchronization
4.2. Introduction to NTP
4.3. NTP Installation and Configuration

5. Kerberos Server Replication

5.1. Description of Replication
5.2. Implementation
5.3. Maintenance

6. Client Configuration

6.1. General GNU/Linux Client Configuration
6.2. PAM
6.3. Apache Web Server
6.4. Microsoft Windows

7. Programming With Kerberos

7.1. The Kerberos API

A. Relevant Sources for More Information

A.1. Links to related documents
A.2. Related web sites
A.3. Related RFCs
A.4. Other references
A.5. Additional resources
A.6. Companies which provide specialist Kerberos consulting

Glossary of Terms

1. About this Document

1.1. General Information

This document is hereby placed in the public domain.

This document lives at http://cryptnet.net/fdp/admin/kerby-infra/en/kerby-infra.html

1.2. Translations

This document is currently only available in the following languages:

[en] English

If you know of a translation or would like to translate it to another language please let me know so that I can distribute or link to the translated versions.

1.3. Credits and Contributors

V. Alex Brennen (VAB) <vab (at) cryptnet.net> (Principal Author)
Nickolai Zeldovich <kolya (at) zepa.net> (Technical suggestions, technical corrections)

1.4. Feedback

Please send any additions, comments, corrections and criticisms to the following email address: <vab@cryptnet.net>.


		An Overview of a Kerberos Infrastructure

Partner:

Latest Features

Security Features of Firefox 3.0

Review: The Book of Wireless

April 2008 Open Source Tool of the Month: sudo

Open Source Tool of March: ZoneMinder

Meet the Anti-Nmap: PSAD

Open Source Tool of February: Nmap!

HowTo: Secure your Ubuntu Apache Web Server

Yesterday's Edition

QuickLinks: Comunity , HOWTOs , Blogs , Features , Book Reviews , Networking ,
Security Projects , Latest News , Newsletters , SELinux , Privacy , Home,
Hardening , About Us, Advertise, Legal Notice, RSS, Guardian Digital