Kerberos vs. LDAP for authentication -- any opinions?

Jeffrey Altman jaltman2 at nyc.rr.com
Thu Jan 29 22:56:40 EST 2004


David Magda wrote:
>
> And what prevents a Kerberos server from being compromised? Any
> system can have a root-kit installed on it.

Simple.  You don't run any other services on your KDC.
All access is via physical connections.  Small network footprint
results in extremely low chance of hacking.




More information about the Kerberos mailing list