Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Using Kerberos authentication for Server/Client application

In c++ I am trying to build a portable server running on Linux and Windows and client running in Windows that will use MS Active Directory for authentication. After some research I decided that best way to go is use Kerberos. I decided to use MIT Kerberos v5 library due to BSD style licence.

But my problem is that I am completely unable to find good resource on working in Kerberos in C++. All examples that I found are just simple code snippets that fail to explain in enough details what input parameters to functions are and reference manuals (doxygen style) that briefly explains the function in question but does not provide enough information to understand the context where to use it.

In short, can you recommend good resource for C++ programmer that two weeks ago did not even know what Kerberos is?

like image 269
neznanec Avatar asked Jun 28 '11 15:06

neznanec


People also ask

What is a Kerberos client Kerberos server and application server?

The three heads of the Kerberos protocol represent the following: the client or principal; the network resource, which is the application server that provides access to the network resource; and. a key distribution center (KDC), which acts as Kerberos' trusted third-party authentication service.

Can Kerberos be used for authorization?

Kerberos authentication is currently the default authorization technology used by Microsoft Windows, and implementations of Kerberos exist in Apple OS, FreeBSD, UNIX, and Linux. Microsoft introduced their version of Kerberos in Windows2000.


1 Answers

The best place to start is the sample simple client and simple server in the MIT code distribution found here: https://github.com/krb5/krb5/tree/master/src/appl/sample

This shows you how to use GSSAPI to do mutual auth

like image 187
pm100 Avatar answered Sep 22 '22 06:09

pm100