ntlm authentication

credentials to access network resources. Integration of Windows. Integrated Windows authentication (formerly known as NTLM, also known as Windows NT Challenge/answer authentication, Windows NT Challenge/response) uses Kerberos v5 authentication or NTLM

credential, the credential is encrypted into the HTTP header Through the message digest secret algorithm, and then transmitted to the server together with the request. the package sent out is shown in: Step 4: After the server receives the request, it extracts valid client credential from the header and connects to the DC Through the LDAP service to find the domain user with the matching username and digest information. If it is found, the credential is valid, and process the request is s

the Kerberos V5 authentication protocol as an SSP (Security Support Provider) that can pass the SSPS (security support provider Interface). In addition, windows Server 2003 also extends this protocol by using the public key certificates of the smart card for initial authentication. The Key Distribution Center (KDC) of Kerberos uses the service database of the Active Directory as its own security account da

No authentication method After a correct client request is sent to the server, the HTTP server returns the 200 status code and directly returns the content. Message example: Request: Get. http: // 10.127.194.3: 8061/voiceobjects ..... Return Value: HTTP/1.1.200. OK .date:. Fri,. 28. oct.20 ..... Ii. Basic Authentication Method The Basic Authentication and digest

sent to the recipient ). This krb_tgs_rep is composed of two parts: the session key (sserver-client) used for client and server is encrypted using the logon session key (skdc-client) and ticket encrypted using the master key of the server. The ticket includes the following content: Session Key: sserver-client. Client name realm: domain name \ Client. End Time: The expiration time of ticket. The client receives krb_tgs_rep and uses the logon session key (skdc-client) to decr

contains the following elements: Session key:sserver-client. Client Name Realm: In short, domain name\client. The expiry time of the End Time:ticket. The Client receives Krb_tgs_rep and obtains Session key (sserver-client)after decrypting the first part using Logon session key (Skdc-client) . With session key and ticket,client, you can interact with the server without having to be a middleman through the KDC. So we say that Kerberos is an efficient

This article transferred from: http://www.cnblogs.com/lanxiaoke/p/6357501.htmlSummary Certification Simple introductionAbstract authentication is the improvement of the basic authentication, that is, the use of abstract instead of account password, so as to prevent the disclosure of account password in plaintext transmissionPrior to the summary certification is not very familiar with, but also thanks to the

thinkphp Auth Authentication analogy RBAC Better authorization authentication method (Auth class authentication) Auth class has been in the thinkphp code warehouse for a long time, but because there has been no tutorial, few people know it, it is actually more convenient than RBAC.RBAC is based on the node authentication