<aside>

Kerberos, DNS, LDAP, MSRPC

</aside>

<aside>

Kerberos

</aside>

What is Kerberos?

Kerberos is an authentication protocol used in Windows Domains to verify user identities without sending passwords over the network.

• Default authentication protocol since Windows 2000
• Open standard (not Microsoft-only)
• Uses tickets instead of passwords
• Provides mutual authentication (user ↔ server)

Where Kerberos Lives

• Runs inside Active Directory Domain Services (AD DS)
• Implemented on Domain Controllers (DCs)
• Each DC contains a Kerberos Key Distribution Center (KDC)

Core Idea (One Sentence)

Prove who you are once, get a ticket, and use that ticket to access services without re-sending your credentials.

Key Components & Abbreviations

KDC – Key Distribution Center

• Central Kerberos service on the DC
• Issues and validates tickets