| 1. | Instead of sending a password, what does Kerberos use for user authentication? | | 2. | What are the benefits of using Kerberos for authentication? | | 3. | What graphical user interface tool provides an interface for managing Kerberos tickets on a Mac OS X computer? | | 4. | If a Mac OS X computer is unable to access kerberized services even though the user has a valid account, what should be one of the first things you check? | | 5. | What Mac OS X configuration file contains the realm to be used by itself to access the KDC? | | 6. | What does klist do? |
Answers | 1. | The KDC sends a user a ticket-granting ticket, which is used for user authentication. | | 2. | With Kerberos, the user's password is never sent across the network. Instead, Kerberos relies upon encrypted keys for authentication. Also, Kerberos provides a centralized authentication system, allowing users to authenticate once and then access different servers. | | 3. | The Kerberos utility in /System/Library/CoreServices can be used to manage tickets. | | 4. | Whenever a Mac OS X computer has problems accessing a kerberized service, you should verify that the client computer, the server, and the KDC computer are all set to the same time. | | 5. | /Library/Preferences/edu.mit.Kerberos | | 6. | The klist utility lists cached Kerberos tickets. |
|