 |
Home
•
Contact
•
Services
•
Support
|
Tech Solutions |
||
 Upgrades Data Recovery Maintenance Security Networks Websites Custom Systems• Location Service • 24/7 Help |
||
 |
 |
|
 |
Philadelphia Computer Tech Support |  | ||||||||||
|
01 - 02 - 03 - 04 - 05 - 06 - 07 - 08 - 09 - 10 - 11 - 12 - 13 - 14 - 15 - 16 - 17 - 18 - 19 - 20 - Key Distribution Center The KDC is integral to the operation of Kerberos, and Windows 2000 implements the KDC as a domain service, as shown in Figure 3.7. The KDC uses Active Directory as the source of its account database (see Chapter 4). The KDC service, along with the Active Directory, is located on every Windows 2000 domain controller. This allows each domain controller to accept authentication and ticket requests instead of depending on a single KDC. Figure 3.7 Kerberos Key Distribution Center runs as a service on Windows 2000 domain controllers. Every Kerberos KDC has its own principal name. The name used in Windows 2000 is krbtgt, which follows the guideline given in RFC 1510. When a Windows 2000 domain is created, a user account named krbtgt is created for the KDC principal, as shown in Figure 3.8. This account is a built-in account, so it cannot be deleted, renamed, or enabled for normal user use. Even though it appears that the account is disabled, in reality it is being used by the KDC. An administrator who attempts to enable the account receives the dialog box shown in Figure 3.9. The password for the account is generated automatically by Windows 2000 and is changed automatically by the system on a regular basis. The key used by the krbtgt account is based on its password, just like a normal user’s long-term key. The long-term key of krbtgt is used to encrypt and decrypt the TGTs it gives out. The krbtgt account is used by all KDCs in a domain. For example, a Windows 2000 domain may have five domain controllers, each of which has its own functioning KDC, but each of the KDCs uses the krbtgt account. This allows each KDC to encrypt and decrypt TGTs using the same long-term key. A client knows which KDC to communicate with because client computer queries the Domain Name System (DNS) for a domain controller. After the client locates a domain controller, it sends the KRB_AS_REQ message to the KDC service on that domain controller. 01 - 02 - 03 - 04 - 05 - 06 - 07 - 08 - 09 - 10 - 11 - 12 - 13 - 14 - 15 - 16 - 17 - 18 - 19 - 20 - |
||||||||||||
| | |||||||||||
|
|
|||
Serving the Philadelphia area with the best in tech service and support.
-Got Tech Trouble? Try A DIY Fix First (WOAI San Antonio)
There's no doubt that troubleshooting tech problems can be troublesome.
-La. Tech honors Johnson (The Bay Area Citizen)
Barrios Technology President Sandy Johnson was recently recognized by Louisiana Tech University as one of its 2008 Distinguished Alumni.
-HDTV and Mobile Gear to Steal CES 2009 Spotlight (PC World via Yahoo! News)
The tech-world's epicenter shifts to Las Vegas this week as the 2009 International Consumer Electronics Show kicks off.
-Tech News (Yehey!)
Smart gadgets lifelike video and pocket versions of laptop computers are expected to be Consumer Electronics Show (CES) stars as the annual extravaganza follows its gizmos onto the Web.
-The hdparm Command (Linux Today)
Computing Tech: "The hdparm utility can be used by root to set and tune the settings for IDE hard drives. You would do this to tune the drives for optimal performance. Once a kernel patch and associated support programs the hdparm program is now included with Ubuntu."
-UK tech start-ups call for more support (Financial Times)
The UK’s technology start-up community is increasing pressure on the government to provide more support to help young companies survive the recession.
-LG previews two new UK-bound LCDs (Engadget)
Stuff.tv has the heads up on two more members of LG's 2009 lineup the LH5000 and LF7700. The LF7700 LCD should fit the bill for anyone needing an alternative to Panasonic's TX-37LZD81 with integrated FreeSat support while a plasma version will follow later in the year. If 100Hz isn't enough and 480Hz is too much the LH5000 drops 200Hz TruMotion tech on European heads later this ...
-Neff goes bargain hunting (CNN Money)
John Neff feels your pain. The legendary money manager 77 beat the S&P 500 by an average of more than three percentage points a year during his 31-year run at Vanguard's Windsor fund. He has been investing his own money since retiring in 1995. Ever a contrarian he has continued to thrive by going against the crowd - such as shorting Nasdaq 100 futures during the tech bubble to pick up 40% ...
-Big tech shows scale back (San Francisco Chronicle)
With the economy casting a gloomy shadow and industry titans Steve Jobs and Bill Gates stepping away Macworld Expo in San Francisco and the Consumer Electronics Show in Las Vegas this week are expected to be more low-key affairs. The two shows normally...
-Major tech shows' days may be numbered (Everett Herald)
Major tech players choose to get their goods on the market right away rather waiting to debut them at big trade shows such as this week's CES in Las Vegas.
Updated 427 minutes ago.
Tech Philly Custom Systems Data Recovery Emergency Service Maintenance Network Service Onsite Service Repair Security Software Spyware Upgrades Viruses Website Design Website Hosting Wireless Computer