?????? ??? ??????? ???????? ???? ????? Kerberos

?????? ????????? ?????? ?????????
???? ???????: 266080 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

????? ??? ??????? ?????? ??????? ????????? ??? ????? Microsoft Windows 2000 ???????? ?????? Kerberos & V5.

??????? ????

??????

?? ???? ????? Windows 2000 Kerberos ?????? ??????? ???????? ?? ??????? ???? Kerberos

???????

?? ????? ????? Windows 2000 Kerberos ???????? ??? RFC ???????:

Kerberos

http://www.ietf.org/rfc/rfc1510.txt?number=1510

???? Kerberos V5 GSSAPI

http://www.ietf.org/rfc/rfc1964.txt?number=1964

?????? ?? Kerberos MIT ??????? ????????? 1.0.5 ? 1.0.6 ? 1.1.1 ???? ??????? ??????? ???????? ??? ??? ?? ????? ????????? ???? ?? ????? ?? whitepaper Windows 2000 Kerberos ??????? ??????? ???????? ???????:
http://technet.microsoft.com/en-us/library/bb742432.aspx
??? ??? ?????? ??????? ??????? ???????? ?? ??????? Heimdal ? CyberSafe IBM ? Sun ?????.

????? Microsoft Windows 2000 Kerberos ?????? ?? RFC ???????:
http://www.ietf.org/rfc/rfc1510.txt?number=1510http://www.ietf.org/rfc/rfc1964.txt?number=1964
?? ???? ????? Microsoft Windows 2000 ?? Kerberos V5 Kerberos V4.

??????

????? ????? ????? ??? ?????? ????? ??? ???? Windows 2000

???????

??? ????? ??????? ???????? ?? ???? Step-by-Step ??? 5 Kerberos (krb5 1.0) ??????? ??????? ????????:
http://technet.microsoft.com/en-us/library/bb742433.aspx

??????

?? ????? Windows 2000 Kadmin

???????

??? ????? Windows 2000 "?????? ???????? ?????? ??? ??????" (LDAP) ?????? ??????.

??????

?? ?? ???? ?????? ????? ???????? ????? Windows 2000 ?????? Kerberos ?

???????

?????? ???? ??????? Windows 2000 ???????? Kerberos ????? ???? ?????? ??? ?? ???? ?? "????? ??????" draft-ietf-cat-kerb-chg-password-02.txt. ??? ????? ????? ??? ?????????? ?? MIT krb5-1.1.1.

?????? ???? ?????? ??? ???? "????? ??????" ?????? ????? ????? ?? ?????? ??? ????? ?? ????? ?????? ?? ??? ???????? ???? ???.

??????

??? Windows 2000 ???? ????? ????? ????? (KDCs)

???????

????? Windows 2000 ?????? ????? SRV ???? ??? ?????? (DNS) ?????? ???? ????? ???? ?????? ?? ???? ?? ???????? ??? ????? SRV _ldap._tcp.dc._msdcs. ????? ???? ???? Windows 2000 ????? ??? ????? SRV ?? _kerberos ?????? _kpasswd. ??????? ?? SRV ???????? ???? ?????? ??? ????? ??? ???? ???? ???? ?? ????? ??????:
%Windir%\System32\Config\Netlogon.dns

??????

????? Windows 2000 ????? ???? ???? ??? ????? ????? (GSSAPI) (RFC-2743) ?

???????

????? Microsoft ?? ???? ??? ???? ????? (SSPI) ??? ????? semantically GSSAPI ???? ?? ???? ???? ?????. ?????? ??? ??????? ?????? ??? SSPI ???? Microsoft Windows Platform SDK. ?????????? ???????? ?????? Kerberos ?????? ??? ???? (SSP) ?? ????? ???? ???????? ???? Kerberos5 GSSAPI ??????? ?? RFC ???????:
http://www.ietf.org/rfc/rfc1964.txt?number=1964

??????

????? Windows 2000 Krb5 ?????? ????? ????????? (API) s ?

???????

??. ?????? Kerberos ??? ???? ????? Windows 2000 ?? ???? SSPI ?? ?????? ????? LsaCallAuthenticationPackage() ????? ?? Windows Platform SDK. ?????? SSPI ?????? GSSAPI Kerberos ?????? ????? ?????? GSSAPI/kerberos5 mechtype (RFC-1964) ??? ?????. ????? ?????? ???? LsaCallAuthentication ???? ???????? ??????? ?? ????? ??????? ?????? ????? Kerberos.

??????

?? ?? ?????? Microsoft ????? Kerberos ?

???????

??? ????? Microsoft ?????? ??????? ???? ??? ???? ??? ??? IETF ?????? ??????:

protocol? Kerberos ?? ????? ???? ??????
http://www.ietf.org/rfc/rfc3244.txt

??????

?? ?? ?? ?????? ??????? ????? Kerberos

???????

????? ?????? ??????? ?? ????? Kerberos ?????? ?????? ??????? ?????? ????? ??? ??????? RFC ???????:
http://www.ietf.org/rfc/rfc1510.txt?number=1510
?????? Windows 2000 ??? ????? ??? ???????? ????????? ?????? ???? ?????? ??????? ?????? ??. ??? ??? ????? ???? Windows 2000 Server ???? ????? 667 669. ???? ??????? ??? ??????? ????? ??????? ?? RFC ???????:
http://www.ietf.org/rfc/rfc1510.txt?number=1510

??????

??? Windows 2000 ???????? ?????? ???? ??????

???????

????? Windows 2000 ??????? ?????? ?? ???? ?????? ???????? ????? (SNTP):
http://www.ietf.org/rfc/rfc1769.txt?number=1769
?????? ??? ?????? ??????? ??????? ????? (UTC) ??? ?????? ?? ??????? ???????. ????? ??????? ???? ????? ????? ?? ?????? ???????? ????? ????? ????? ? ???????? PDC FSMO ? ?????? ????? ???????. ??? ?????? ???? ????? ?? ???? ??????? ????? net time. ????? ????? ???????? ??? ???? ???? ????? ?? Windows 2000 ???? ???? ???????? ??? ???????. ??? ??????? ?? ????? ??????? Windows 2000 ? ????? ????? ?? ?? ??????? ?????? ????? ????? ??????? ?????. ????? ?????? ??? ?????? ?????? Windows NT ?? ????? ????? ??????? ?? ??? ???? ?????? ??????.

??????

?? ?? ????? ??????? ????? Windows 2000 ?

???????

????? Windows 2000 ????? ??????? ???????:

rc4 hmac

DES CBC crc

DES CBC md5

??? ????? ????? Kerberos:
?? ??? ??????????? ??? ??????
?????????????????????
rc4 hmac12812856 (128 ?? "???? ???????" ?????? ?????
DES CBC crc565656
DES CBC md5565656

??????

??? ?????? ????? ???? ????? Kerberos ?? ???

???????

??? ???????? ????? Kerberos ?? ????? ??????? ?????? ????? ?????? LSA ?? ????? ????? ??????? ?????? ????? ???? ???????? ??????. ???????? ??? ?????? ?????? ???? ?? ?????? ??????? ?? ????? ??????? ??????. ???? ??????? ??????? ???????? Resource Kit Klist.exe ?? Kerbtray.exe ???? ??????? ?? ????? ??????? ??????.

??????

?? ????? Windows 2000 Pkinit

???????

???? Windows 2000 Kerberos ????? ????? ????? Pkinit 9. ??????? ???? Pkinit ?? ???? ??????? Windows 2000 ????? ?????? ????? ?????? ???????? ??????? ??????. ?? ??? ??????? Pkinit ?? ??????? ???? ?? ??? ????? Windows 2000.

??????

?? ?? ????? ????????? ????? ?

???????

??? ?????? ???? ????? ????????? ??? ????? ?????? ???????? ??? ??????. ????????? ??????????:
  • MaxServiceTicketAge: 10 ?????
  • MaxTicketAge: 10 ?????
  • MaxRenewAge: 7 ????
  • MaxClockSkew: 5 ?????

??????

???? ???? ??? ???? ????? ???? ?

???????

???? ????? ??? Kerberos ???? ??? ???? ????? ??????. ?? ????? ??? ???????? ?? ??? ?????? ?????? ??? ????? - ??? - ??????? (TGT) ??? ??? ????? ?????? ??? ?????? ?? ??? ???? ?? ???? ????. ???? ???? ???? ?????? ?? ?????? ??? ????? ???? ??? ?????.

??????

????? ??????? ???????

???????

???? ??????? ???? ????? ???? ???????? ?? ??? ???????? ?????? ??? ????? ???? ???????. ????? ??? ?????? ????? ????? ???????? TGT ??? ?????? ???? ??? ???? ??? ????? ?? KDC ????? ?? ????????. ??? ?????? ?????? ??? ???? ???????? ?? ????? ?? ???? ?????? ????? ?? ??? ????? TGT. ?? Windows 2000 ????? ?? ????? ??? ????? ???? ???? ????? ????? ???? ???? TGT ???????? ??? ??? ???????.

??????? Kerberos "????? ??????" ????? ????? ????? ????? - "??? ????? ?????". ????? KDC Windows 2000 ??? ??????? ?? ????? ?????? ???? ??? ????? ??????? ???? ???? ???? ????? ?????. ??? ?? ????? ????? ????? ?? ?????? ????? ?????? ? ?? SSPI ???? TGT ???????? ??? ?????? ??? ??? ?????? SSPI ???????. ??? ?? ??? ????? ??????? ????? ????? ????? ??????? SSPI ?? ?? ??? ????? ????? ?? TGT.

??? ??? ?????? ?? KDC ?? ???? ?????? ????? ????? ????? ????? RealmFlags ?? ????? ????? ?????? ???????? ??? ?????? ???????. ????? ????? RealmFlags ??? ???? 4 ????? ??? ??????.

?????? ??? ??????? ?????? ??? ????? ??????? RealmFlags ???? Windows 2000 ??????? ?????? (Regentry.chm) ??????? ?? Windows 2000 Resource Kit.

??????

?? ????? Windows 2000 SPNEGO (RFC-2478)

???????

???. ?????? SSP ?????? SPNEGO. ?? SSP ?????? ???? ????????? ??????? ???? ?????? ???? ??????? ?? ???? ??????? Windows 2000.

??????

?? ????? Telnet ???????? ??? ??????? (FTP) ?? Windows 2000 Kerberized ?

???????

?? ?????? ????? Telnet ?FTP ?? ???? ??????? Windows 2000 Kerberos ????????.

?????? ?????? ?????? ???????? ?? ??? ??????? ???? ????? ?????? ?????? ?? Microsoft. ?? ???? Microsoft ?? ???? ? ?????? ?? ??????? ????? ???? ?? ???? ?????? "?? ??? ????????.

???????

???? ???????: 266080 - ????? ??? ??????: 10/???/1428 - ??????: 7.5
????? ???
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
????? ??????: 
kbmt kb3rdparty kbfaq kbinfo kbkerberos KB266080 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????266080

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com