2.3 Kerberos

Kerberos is an server-client authentication method that was built with security concerns from day one. As such, Kerberos offers exceptional protection from hackers.

In addition to natively better security, Kerberos is also a much more flexible authentication mechanism. It permits transparent and secure authentication between an application server and a corresponding application client. In this context, an application can be “NFS”.

Kerberos is an excellent mechanism for secure authentication. However, it does not maintain much additional information other than the parties (users and services) that need to be authenticated. Furthermore, Kerberos does not directly relate to the files /etc/passwd, /etc/group and /etc/shadow. This means that Kerberos cannot be used directly to replace the usual login authentication method.