???? ???????? ???????? ???????? Kerberos ???????? ?? Windows 2000

?????? ????????? ?????? ?????????
???? ???????: 217098 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

??????

???? ??? ??????? ?????? ???????? Kerberos ?? ???? ??????? Windows 2000.

???? ?? ?? ?????? ???????? ?????? Windows 2000 ?????? ?????? ?????. ???? ??? ??????? ??? ?????? ???????? Kerberos ?? ???? Windows 2000 ????: ???????? ??? ?????? Windows 2000 ?????? Windows 2000.

??????? ????

???? Windows 2000 ??? Kerberos MIT v.5 ????????? ??? ?? ???? ?? IETF RFC 1510. ???????? Kerberos ????? ?? ????? subprotocols. ???? subprotocol ???? ???? KDC (???? ????? ????????) ?????? ????? ???? ??? ????? ???? "?" TGT ("????? ??? ???????") Exchange ???? ?????? (AS). ???? subprotocol ?????? KDC ????? ?????? "?" ????? ???? ??? ???? Exchange ???? ??? ??????? (TGS). ???? subprotocol ??? pre-sends ?????? ????? ???? ?????? ??? ???? Exchange ????/???? (CS).

????? ?????? ???? ???? ??? ????? ????? ????? ?? ???? ?????? Kerberos ??? ???? ??? ???? ??????? ????.

  1. ?????? ???? (AS) Exchange
    1. A ?? ???? ??? Microsoft Windows 2000 Professional ???? ???????? ?????? ??? ???? ????? Microsoft Windows 2000 ????? ??? ???????? ????? ?????? ?????? ??. ???? Kerberos ???? ??? ????? ???? ????? ????? ???? ?????? ?????? ?? ??? ????? ????? ???? ??????? ?? ????? ??????.
    2. ???? Kerberos ?????? ????? ??? ??????? ??????? Server (KDC) ? ?? ????? KRB_AS_REQ (Kerberos ?????? ?????? ???). ??? ??????? ?????:
      • ????? ???????? ? ??? ???? ???? ??? ???? ?????? ???????? ("????" ??? ???????) TGS
      • ???? ?????? ???????? ??????? ????? ?? A ???? ???? ?????? ?????? ??. ??? ?????? ????? ????? ???????? ????? ??????? ???????. ??? ????? ????? ????? ?????? ????? ???? ?????? ????? ?? ???? OWF.
    3. KDC ??? ???? KRB_AS_REQ ?? A ????? ?? ???????? ? ?? ????? ???????? ?????? ?? (Active Directory) ? ???? ??????? ??????? ????? ?? ?? ????? ???????? ???????? ??????? ??? ????? ?????? ?????? ????. ??? ??? ??? ???? ?????? ????????? KDC ?????? ?????? ??? ?? ????? ???????? ???????? ??????? ???????? A ????? ??????? ??????? ??? ??? ????? ??????? ???.
    4. ???????? ????? ??? KDC ??????? ?? ??? ????? ???? ????? ?????? ?????? ???????? ???? ???? ?? ???? ???????? ?????? ??? ???? ????? ?????? ?? ??? ???? ??? ?? ??????? (TGS). ??? ????? ?????? ???????? ?? ??? ??? ???...
      • ????? ???? ??? ????? ???? ???? ?? ??????? ?????? ????? ??????? ???????
      • ???? ????? ?? ????? ???? ??? ????? ?????? ????? ?????? ??????? ?? ????? ??? ??????? (TGT) ? ??????? ?????? ??????? ??????? KDC ????? ??????.
      • ??? ???? KDC ???? ?????? ???????? ??? ??? ???? ??? ?????? ???? ?? ???? ????? ??? KRB_AS_REP (??????? ?????? Kerberos)
      • ????? ????? ?????? ???? ? ???? ?? ????? ????? ???? ??? ????? ?????? ?????? ??????? ????? ??????? ???????. ???? ????? ????? ????? ???? ????? ?? ????? ??????? ?????? ????? ???? ??? ??????. TGT ????????? ?? ??????? ???? ??????? ?? ????? ??????? ?????? ?????
  2. ??? ??????? (TGS) ???? Exchange
    1. ?? ??? ??????? ???? Kerberos ???? ??? ????? ???????? ???? ????? ???? ?????? ???????? ?????? ??? ?????? ????? ???????? "?" ? ?? ???? ????? ????? ??? KRB_TGS_REQ (Kerberos ??? ??????? ???? ???) ? ?????? ??? KDC. ????? ??? ??????? ?? ???????? ???????...
      • ???? ???? ????? ???? ??? ??? ?????? ?????? ????????
      • ????? ????? ???????? ????? ???? ??? ????? ?????? ????? ?????????
      • ?? ?????? ???? ?? Exchange AS TGT
    2. KDC ?? ????? TGT ?? ??????? ??????? ????? ?? ? A extracts ????? ???? ??? ????? ??????. ????? ???? ??? ????? ?????? ????? ??????? ????? decrypt A. ??? ??? ?????? ??????? ????? ?????? KDC invents ????? ???? ??? ????? ??? ?? ?????? ?? B. ??? ????? ?????? ?? ????? ???? ????? ?????? ??? ??? ???? ??? A ?? ????? ????? ????? ??? ???
      • ??? ????? ???? ????? ???????? ????? ????? ???? ??? ????? ??????
      • ??? ????? ?????? ??????? ???????? ?????? ????? ??????? ???????, ?? ????? ?? ????? ?????? ???????.
    3. decrypts ???? ??? ?????? ????? ????? ?????? ????? ???? ??? ????? ?????? ?????? ??, ?? ???? ?????? ????? ???? ????? ?? ??????? ?????? ????? ?? ?? ????? ?????? ?????.
  3. Exchange ?????? - ?????? (CS)
    1. ????? ?????? Kerberos ???? ???? ??????? ?????? ????? B. A ????? ???? ?????? ? ??? ??? KRB_AP_REQ (??? ????? Kerberos). ????? ??? ??? ???????:
      • ????? ????? ???????? ????? ???? ????? ?????? ?
      • ????? ????? ????? ?? B ??????? ?????? ??????? ??????? ?
      • ????? ???? ??? ?? ??? ??? ??? ?????? ???????? ?????????.
    2. ?? ????? B ??????? ?????? extracts A ??????? ??????? ???? ?????. ?????? ????? ???? ????? ??? ????? decrypt ? ? ??? ????? ?????? ??????. ??? ??? ??????? ????????, B ???? ?? ????? ?????? ???????. ??? ?? ????? ??? ??????? B ?????? ????? ???? ????? ?????? ????? ?? A ????? ????? ?????? ??????? ??? ? ?? ????? ??? KRB_AP_REP (?? ??????? Kerberos)
    3. A ?? ????? ???? ?? ????? ???? ?????. ??? ??? ??????? ?????? ?? ??? she ????? B ?? assured ?????? ?????? ??? ????? ??? ????? ????? ???????.

???????

???? ???????: 217098 - ????? ??? ??????: 09/???/1428 - ??????: 3.2
????? ???
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Datacenter Server
????? ??????: 
kbmt kbinfo kbnetwork KB217098 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????217098

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com