Kerberos provides a centralized authentication server whose function is to authenticate users to servers and servers to users.
- Kerberos Authentication uses the server and database for client authentication.
- Kerberos runs as a third-party trusted server known as the Key Distribution Center.
- Each user and service on the network is a principal.
Components
Kerberos consists of three main components that work together to authenticate users, manage tickets and control secure access to network services.
1. Authentication Server (AS)
This performs initial verification of user identity and issues a ticket for further access.
- Validates user credentials during the login process
- Generates Ticket Granting Ticket (TGT) after successful authentication
2. Ticket Granting Server (TGS)
It issues service tickets required to access specific services or servers.
- Receives requests along with Ticket Granting Ticket (TGT)
- Generates service-specific tickets for requested resources
3. Database
It stores user credentials and access-related information required for the authentication process.
- Maintains records of users and their permissions
- Supports verification of access rights during authentication
Working of Kerberos
Kerberos works on a trusted third-party authentication model where a central server issues time-limited tickets to enable secure authentication and access to network services without repeatedly sending passwords.
Step 1: User Request for Service
The user logs in and requests access to a network service. The request is sent to the Authentication Server (AS) to obtain a Ticket Granting Ticket (TGT).
Step 2: Authentication Server Verification
The AS verifies the user credentials using its database and issues a TGT along with a session key. The response is encrypted using a key derived from the user’s password.
Step 3: TGT Decryption and Request to TGS
The user decrypts the response using their password and obtains the TGT. It is then sent to the Ticket Granting Server (TGS) along with an authenticator containing the user identity and network address.
Step 4: Ticket Granting Server Processing
The TGS validates the TGT and authenticator. After successful verification, it issues a service ticket for the requested server.
Step 5: Service Request to Server
The user sends the service ticket and a new authenticator to the application server.
Step 6: Service Access Granted
The server verifies the ticket and authenticator. If valid, access to the requested service is granted.
Kerberos Security Analysis
Kerberos is a widely used authentication protocol, but it is not completely immune to attacks. While it provides strong security, certain vulnerabilities can still be exploited if proper safeguards are not followed.
Security threats
- Ticket forgery attempts
- Brute-force or credential stuffing attacks
- Malware-based exploitation or encryption downgrade attempts
Strengths
- Strong and upgradeable encryption support
- Highly reliable for network authentication
- Effective when combined with strong password policies and correct configuration
Applications of Kerberos
- User Authentication: Kerberos authenticates users using a single login. After verifying credentials, it issues a Ticket Granting Ticket (TGT) to allow secure access.
- Single Sign-On (SSO): Users log in once and can access multiple authorized network services without re-entering credentials, improving convenience and usability.
- Mutual Authentication: Both client and server verify each other before communication using shared secret keys, ensuring secure and trusted connections.
- Authorization: After authentication, Kerberos issues service tickets that define user permissions, allowing access only to authorized resources.
- Network Security: Kerberos uses a centralized authentication server to manage credentials and control access, preventing unauthorized use of network resources.
Limitations
- Each network service requires individual modification for compatibility.
- Does not perform efficiently in time-sharing environments.
- Requires continuously available and secure authentication server.
- Centralized key management increases risk if compromised.
- Assumes client systems remain secure, which may not always hold true.
- Failure or breach can lead to cascading loss of trust across systems.
- Scalability challenges may arise in large or distributed environments.