Bonjour à tous et à a toutes !
Voila je suis en R&T et en ce moment je travail sur le protocole Kerberos.
Je trouve beaucoup de documentation sur internet, et je ne pas comprend pas trop en quoi consiste le système de ticket de ce protocole.
Quelqu'un aurais amabilité de m'expliquer s'il vous plait ??
Merci d'avance
Bonjour,
D'après Wikipedia :
The client authenticates to the AS once using a long-term shared secret (e.g. a password) and receives a TGT from the AS. Later, when the client wants to contact some SS, it can (re)use this ticket to get additional tickets from TGS, for SS, without resorting to using the shared secret. These tickets can be used to prove authentication to SS.Client-to-server ticket (which includes the client ID, client network address, validity period and Client/Server Session Key) encrypted using the service's secret key.http://en.wikipedia.org/wiki/Kerberos_(protocol)The SS decrypts the ticket using its own secret key to retrieve the Client/Server Session Key. Using the sessions key, SS decrypts the Authenticator and sends the following message to the client to confirm its true identity and willingness to serve the client:
ProgVal
qu'est-ce que l'AS svp ?
Toujours d'après la même page de Wikipedia :
Kerberos uses as its basis the symmetric Needham-Schroeder protocol. It makes use of a trusted third party, termed a key distribution center (KDC), which consists of two logically separate parts: an Authentication Server (AS) and a Ticket Granting Server (TGS). Kerberos works on the basis of "tickets" which serve to prove the identity of users.
