Questions on Kerberos

[Christopher D. Clausen]

Joseph Kuan <joe.kuan at itheon.com> wrote:
> 1. I notice that some of the kerberos (windows authentication) packets
> have principal with dollar sign character at the end. Also the
> principal
> is not the user name, it is actually the hostname. What does it mean?

Those are the principals for machine or computer accounts.

> 2. I am trying to measure the response time of windows login. For a
> windows login, can I assume the time taken from AS-REQ/REP to the
> first TGS-REQ/REP ?

seems reasonable to me.

<<CDC
-- 
Christopher D. Clausen
ACM at UIUC SysAdmin