Kerberos

E191937

Kerberos is a network authentication protocol that uses secret-key cryptography to securely verify the identity of users and services in distributed systems.

All labels observed (6)

Label Occurrences
Kerberos canonical 13
Kerberos V5 protocol specification 1
Kerberos version 4 1

How this entity was disambiguated

Statements (49)

Predicate Object
instanceOf authentication protocol
network authentication protocol
security protocol
basedOn symmetric-key cryptography
canUse public-key cryptography extensions
category computer security
commonlyUsedIn Active Directory
Linux ecosystem
surface form: Linux systems

Microsoft Windows domains
UNIX systems
enterprise networks
currentMajorVersion Kerberos self-linksurface differs
surface form: Kerberos version 5
designedFor client-server model
distributed systems
secure network authentication
developedAt Massachusetts Institute of Technology
developedBy MIT Project Athena
doesNotUse public-key cryptography by default
hasComponent Authentication Server
Key Distribution Center
Kerberos self-linksurface differs
surface form: Ticket Granting Server
influenced modern single sign-on systems
namedAfter Cerberus from Greek mythology
originallyDevelopedIn 1980s
provides confidentiality
integrity
replay protection
reliesOn shared secret keys
trusted third party
requires synchronized clocks
specifiedIn Kerberos self-linksurface differs
surface form: Kerberos V5 protocol specification
standardizedAs RFC 4120
standardizedBy Internet Engineering Task Force
surface form: IETF
supersededVersion Kerberos self-linksurface differs
surface form: Kerberos version 4
supports cross-realm authentication
mutual authentication
single sign-on
threatModel eavesdropping
password guessing attacks
replay attacks
transportProtocol Transmission Control Protocol
surface form: TCP

UDP
uses authenticators
secret-key cryptography
session keys
ticket-granting tickets
tickets
time-stamps
usesDefaultPort 88

How these facts were elicited

Referenced by (18)

Full triples — surface form annotated when it differs from this entity's canonical label.

NFS authenticationMechanism Kerberos
SMB authenticationMethod Kerberos
this entity surface form: NTLM
SMB authenticationMethod Kerberos
fetchmail supportsProtocol Kerberos
Thunderbird email client supportsAuthentication Kerberos
subject surface form: Thunderbird
Kerberos hasComponent Kerberos self-linksurface differs
this entity surface form: Ticket Granting Server
Kerberos currentMajorVersion Kerberos self-linksurface differs
this entity surface form: Kerberos version 5
Kerberos supersededVersion Kerberos self-linksurface differs
this entity surface form: Kerberos version 4
Kerberos specifiedIn Kerberos self-linksurface differs
this entity surface form: Kerberos V5 protocol specification
Samba supportsAuthentication Kerberos
NTLM weakerThan Kerberos
NTLM recommendedReplacedBy Kerberos
MongoDB database supportsAuthenticationMechanism Kerberos
subject surface form: MongoDB