|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |
To: kerberos@MIT.EDU Date: 2 Sep 1996 15:09:00 +1000 From: dms03@handel.cs.uow.edu.au (Dhaval M Shah) Hello everybody, I have a doubt. I am implementing a prototype of kerberos to aid students understand the process of how the kerberos protocol works [ A CAL tool ]. In the general kerberos paradigm, the user types his name on the work station, the username is sent across the network to the KDC, which checks up the username in the password database, generates the session keys and TGT and other administrativia and encrypts it using the user's password and sends back the token across to the workstation, which on receipt of the token prompts for the password and decrypts the token with the password which the user enters. Now my question is, What happens if the KDC is not able to find the user name in its password database? Does it send something across over the network in clear text - like - "User Name Not found" <- well it does not, then how does the workstation know that the username that has been entered is an invalid username and not available in the database? All help is appreciated. thanks dhaval dms03@uow.edu.au
|
|
|
|
|
|
|
|
|
|
|
|
| home | help | back | first | fref | pref | prev | next | nref | lref | last | post |