Definitive Kerberos for engineers

Description

This hands on course covers the details of Kerberos,
from installation and administration through to how it all
works including the protocols.

What will you learn

Kerberos for engineers training course details

Engineers interested in security.

TCP/IP foundation for engineers

2 days

Single Sign On, The protocol, the standard, history, v4, v5, RFCs, Linux, Windows.

AAA, Authentication, Authorization, Accounting. Kerberos vs LDAP and directories. Privacy, integrity. Kerberos realms, principles, instances. Keys, salts, passwords. Key Distribution Centre, Authentication server, ticket granting server. Tickets.

Installing Kerberos, creating realms, testing. DNS and Kerberos, Kerberos clients.
Hands on Windows and Linux Kerberos.

The Needham-Schroeder protocol, Kerberos v4. Authentication server, ticket granting server, Kerberos v5, encryption options, ticket options, other protocol features and extensions. Related protocols: GSSAPI, SPNEGO.
Hands on Using Wireshark to 'see' Kerberos.

Approach, debugging tools, errors and solutions.
Hands on Kerberos troubleshooting.

Kerberos attacks, protocol security issues. Dictionary attacks, brute force attacks, replay attacks, MITM attacks, security solutions, protecting the KDC, firewalls, NAT and Kerberos.
Hands on Kerberos logging.

Kerberos logins, Kerberos and web based applications, Directory services.

Cross realm authentication, Windows issues, Windows and UNIX interoperability,
Hands on Using a Windows DC for UNIX clients.