CIFS and Kerberos question

Tim Potter tpot at samba.org
Sat Dec 14 02:18:00 GMT 2002


On Sat, Dec 14, 2002 at 08:26:40AM +1100, Luke Howard wrote:

> >[Question 3. What exactly does Kerberos do in the server?  If Kerberos is used only for initial authentication,
> >then all I need to do is PKINIT in the filesystem on UNIX, right?  Or, does Kerberos actually check a ticket per
> >each message, and even more, encrypt the data transferred between the client and the server?  If so, what exactly
> >do I have to do?  Encrypt packets with Kerberos functions?] 
> 
> By default, Kerberos is used for SMB authentication only.

I thought I had seen some of the new Windows 2000 DCERPC pipes (FRS 
for example) use Kerberos encryption.


Tim.



More information about the samba-technical mailing list