采用目录服务Kerberos认证实现统一身份认证  

Realization of unified authentication based on directory service and Kerberos authentication mechanism

作　　者：顾丽[1] 石福斌[1] 曹乐松[1] 

机构地区：[1]哈尔滨理工大学计算机科学与技术学院,哈尔滨150080

出　　处：《信息技术》2007年第4期55-58,共4页Information Technology

摘　　要：计算机安全系统所需要的是一种具备适应性,稳健性和自治性的技术。针对其适应性和自治性,在开发一个企业级的用户身份认证体系同时,依据目录服务理论,将轻量级目录访问协议和Kerberos认证技术相结合来解决密码安全和身份验证,并且应用于身份认证服务器的结构设计,进行用户统一身份认证和授权,使得整个系统的安全性有了进一步的提高。Computer security system requires the properties of flexibility, stability and self- controllability. Focusing on the flexibility and self - controilabihty and referring to the directory service theory, this paper developes ＇an identity authentication system for the enterprises by introducing an integrating Kerberos authentication mechanism with LDAP protocol. Kerberos can be applied to the design of certificate authorities architeture and the implementation of the unified authentication and authorization, which significantly improves the security of the indentity authentication system

关 键 词：身份认证 目录服务 轻量级目录访问协议 KERBEROS 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]