About this question
Can anyone describe/outline the relative merits of using Kerberos or LDAP for authentication in a large heterogeneous environment?
AndCan we switch between them transparently?
Can anyone describe/outline the relative merits of using Kerberos or LDAP for authentication in a large heterogeneous environment?
AndCan we switch between them transparently?
Log in to share your answer and help other learners.
Log in to answerBest Answer · By JanBask Cyber Security Expert
Answered on Apr 6, 2022
LDAP vs Kerberos
Where possible use Kerberos authentication above all else. It was built for providing authentication/authorization and is the most secure option. The whole premise is to exchange credentials in an environment that isn't trusted. LDAP can be easily misconfigured to send credentials in clear text over the network. An easy way to prevent this is to always use LDAPS (TCP636) as it encapsulates all traffic in SSL. LDAP is often used for adhoc authentication/authorization, especially web applications using forms authentication.
Free tutorials and interview questions from industry experts — learn the skill, then get ready to prove it.
Step-by-step Cyber Security guides from industry experts
Common Cyber Security interview questions, answered
Guides, tips and career advice on Cyber Security from JanBask experts.
Cyber Security Is Cybersecurity a Good Career? Pay, Roles, Outlook & How to Start
Is cybersecurity a good career for beginners and for the future? See pay, demand, the reality check, which role fits you, and how…
Cyber Security Is SOC Analyst a Good Career? Salary, Growth, Pros & Cons
Is SOC analyst a good career or just a stressful entry job? See real salary data, growth paths, pros and cons, AI impact, and how…
Cyber Security Is GRC Analyst a Good Career? Salary, Growth, Pros & Cons
Is GRC a good career path? See salary context, growth options, pros and cons, AI's impact, and whether GRC is worth it for you,…
Cyber Security The Ultimate Guide to SOC Analyst Certifications: Entry-Level to Senior
Not sure which SOC analyst certification to take first? Compare Security+, CySA+, SC-200, and hands-on certs with costs, study…