kerberos-初识

kerberos的官方文档

定义：

Kerberos is a network authentication protocol. It is designed to provide strong authentication for client/server applications by using secret-key cryptography

Kerberos是一个网络认证协议，它通过密码加密为客户端和服务器程序提供了健壮认证体系

产生的原因：

The Internet is an insecure place. Many of the protocols used in the Internet do not provide any security. Tools to “sniff” passwords off of the network are in common use by malicious hackers.
因特网是一个不安全的地方，许多协议在因特网上没有任何安全的传输，sniff工具被恶意的黑客使用截取到网络密码。

Some sites attempt to use firewalls to solve their network security problems. Unfortunately, firewalls assume that “the bad guys” are on the outside, which is often a very bad assumption. Most of the really damaging incidents of computer crime are carried out by insiders. Firewalls also have a significant disadvantage in that they restrict how your users can use the Internet. (After all, firewalls are simply a less extreme example of the dictum that there is nothing more secure than a computer which is not connected to the network — and powered off!) In many places, these restrictions are simply unrealistic and unacceptable.

一些网站试图使用防火墙来解决网络安全问题。糟糕的是，防火墙是以所有的坏家伙在外面为前提，这是一个非常坏的假设。很多真正的破坏性的计算犯罪都是发生在内部。防火墙也有一个非常重要的缺点，就是限制用户的连接互联网。在很多时候这些限制是不切实际和不可接受的。