Questions on Kerberos

Joseph Kuan joe.kuan at itheon.com
Thu Jul 6 10:40:05 EDT 2006


Hi all,

  I am not sure whether this is right place for these questions. If so, 
I do apologise.

I have been using ethereal to analysis the kerberos packets.

1. I notice that some of the kerberos (windows authentication) packets 
have principal with dollar sign character at the end. Also the principal 
is not the user name, it is actually the hostname. What does it mean?

2. I am trying to measure the response time of windows login. For a 
windows login, can I assume the time taken from AS-REQ/REP to the first 
TGS-REQ/REP ?

Many thanks
Joe

**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept for the presence of viruses using SOPHOS.

http://www.itheon.com
**********************************************************************




More information about the Kerberos mailing list