Network Security Protocol like Kerberos

View: New views
5 Messages — Rating Filter:   Alert me  

Network Security Protocol like Kerberos

by dxv7631 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi All,
I have a simple question regarding Kerberos. Is there any Network Security Protocol like Kerberos? If yes please give some examples.

Re: Network Security Protocol like Kerberos

by Luke Howard :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hmm, maybe DASS?

        http://www.faqs.org/rfcs/rfc1507.html

-- Luke

On 15/09/2009, at 11:51 PM, dxv7631 wrote:

>
> Hi All,
> I have a simple question regarding Kerberos. Is there any Network  
> Security
> Protocol like Kerberos? If yes please give some examples.
> --
> View this message in context: http://www.nabble.com/Network-Security-Protocol-like-Kerberos-tp25462467p25462467.html
> Sent from the Kerberos - General mailing list archive at Nabble.com.
>
> ________________________________________________
> Kerberos mailing list           Kerberos@...
> https://mailman.mit.edu/mailman/listinfo/kerberos
>

--
www.padl.com | www.fghr.net

________________________________________________
Kerberos mailing list           Kerberos@...
https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Network Security Protocol like Kerberos

by Douglas E. Engert :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


dxv7631 wrote:
> Hi All,
> I have a simple question regarding Kerberos. Is there any Network Security
> Protocol like Kerberos? If yes please give some examples.

"like" is a very vague term. What are you trying to do?

Hmm, maybe Globus GSI?

Google for Globus GSI



--

  Douglas E. Engert  <DEEngert@...>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444
________________________________________________
Kerberos mailing list           Kerberos@...
https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Network Security Protocol like Kerberos

by Daniel Savard :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

2009/9/16 Douglas E. Engert <deengert@...>

>
> dxv7631 wrote:
> > Hi All,
> > I have a simple question regarding Kerberos. Is there any Network
> Security
> > Protocol like Kerberos? If yes please give some examples.
>
> "like" is a very vague term. What are you trying to do?
>
> Hmm, maybe Globus GSI?
>
> Google for Globus GSI
>
>
And why not Kerberos? What shortcomes are you trying to avoid?

--
-----------------
Daniel Savard
________________________________________________
Kerberos mailing list           Kerberos@...
https://mailman.mit.edu/mailman/listinfo/kerberos

RE: Network Security Protocol like Kerberos

by Thomas Hardjono :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message


________________________________________
>> From: kerberos-bounces@... [kerberos-bounces@...] On Behalf Of dxv7631 [magicaldev@...]
>> Sent: Tuesday, September 15, 2009 5:51 PM
>> To: kerberos@...
>> Subject: Network Security Protocol like Kerberos

>> Hi All,
>> I have a simple question regarding Kerberos. Is there any Network Security
>> Protocol like Kerberos? If yes please give some examples.
>> --

You may need to be specific about the term "network".

If you are looking for a plain IP layer (layer 3) pair-wise authentication
protocol there is IKE (for IPsec) and some password based protocols that can
be used at the IP layer (e.g. CHAP).

If you are looking at layer-2 and "layer 2.5", there is a whole
slew of pair-wise "authentication protocols" that are enveloped
within the EAP protocol (as EAP-methods).
Examples: EAP-TLS, EAP-TTLS, EAP-FAST, etc. etc.
Plus there is the IEEE802 related MAC-layer security protocols.
There is no reason why one could not run EAP directly above IP.

If you are looking for a "network admission/control protocol" (which
includes the end-point authentication), then you should look
at the NAE (TNC) set of protocols in the IETF NEA WG.
Its vendor/proprietary counterpart is CNAC (Cisco) and NAP (Microsoft).

/thomas/




________________________________________________
Kerberos mailing list           Kerberos@...
https://mailman.mit.edu/mailman/listinfo/kerberos