Instead of sending a password, what does Kerberos use for user authentication?
2.
What are the benefits of using Kerberos for authentication?
3.
What graphical user interface tool provides an interface for managing Kerberos tickets on a Mac OS X computer?
4.
If a Mac OS X computer is unable to access kerberized services even though the user has a valid account, what should be one of the first things you check?
5.
What Mac OS X configuration file contains the realm to be used by itself to access the KDC?
6.
What does klist do?
Answers
1.
The KDC sends a user a ticket-granting ticket, which is used for user authentication.
2.
With Kerberos, the user's password is never sent across the network. Instead, Kerberos relies upon encrypted keys for authentication. Also, Kerberos provides a centralized authentication system, allowing users to authenticate once and then access different servers.
3.
The Kerberos utility in /System/Library/CoreServices can be used to manage tickets.
4.
Whenever a Mac OS X computer has problems accessing a kerberized service, you should verify that the client computer, the server, and the KDC computer are all set to the same time.
