{"id":477762,"date":"2023-08-09T09:19:52","date_gmt":"2023-08-09T09:19:52","guid":{"rendered":""},"modified":"2023-09-05T11:15:23","modified_gmt":"2023-09-05T11:15:23","slug":"kerberos","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/kerberos\/","title":{"rendered":"\u30b1\u30eb\u30d9\u30ed\u30b9"},"content":{"rendered":"

Kerberos \u306f\u5e83\u304f\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u8a8d\u8a3c\u30d7\u30ed\u30c8\u30b3\u30eb\u3067\u3001\u30e6\u30fc\u30b6\u30fc\u3068\u30b5\u30fc\u30d3\u30b9\u304c\u5b89\u5168\u3067\u306a\u3044\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u4e0a\u3067 ID \u3092\u8a3c\u660e\u3059\u308b\u305f\u3081\u306e\u5b89\u5168\u3067\u4fe1\u983c\u6027\u306e\u9ad8\u3044\u65b9\u6cd5\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002 1980 \u5e74\u4ee3\u306b MIT \u306b\u3088\u3063\u3066\u958b\u767a\u3055\u308c\u305f Kerberos \u306f\u3001\u5f53\u521d\u3001Project Athena \u5206\u6563\u30b3\u30f3\u30d4\u30e5\u30fc\u30c6\u30a3\u30f3\u30b0\u74b0\u5883\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5f37\u5316\u3059\u308b\u305f\u3081\u306b\u8a2d\u8a08\u3055\u308c\u307e\u3057\u305f\u3002\u6642\u9593\u306e\u7d4c\u904e\u3068\u3068\u3082\u306b\u3001\u305d\u306e\u5805\u7262\u6027\u3068\u52b9\u7387\u6027\u306b\u3088\u308a\u3001\u3055\u307e\u3056\u307e\u306a\u30b7\u30b9\u30c6\u30e0\u3084\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u8a8d\u8a3c\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u306e\u4e3b\u8981\u306a\u9078\u629e\u80a2\u3068\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n

\u30b1\u30eb\u30d9\u30ed\u30b9\u306e\u8d77\u6e90\u306e\u6b74\u53f2\u3068\u305d\u308c\u306b\u3064\u3044\u3066\u306e\u6700\u521d\u306e\u8a00\u53ca<\/h2>\n

\u30b1\u30eb\u30d9\u30ed\u30b9\u306e\u540d\u524d\u306f\u3001\u30ae\u30ea\u30b7\u30e3\u795e\u8a71\u306b\u767b\u5834\u3059\u308b\u51a5\u754c\u306e\u9580\u3092\u5b88\u308b\u4e09\u3064\u306e\u982d\u306e\u72ac\u300c\u30b1\u30eb\u30d9\u30ed\u30b9\u300d\u306b\u7531\u6765\u3057\u3066\u3044\u307e\u3059\u3002\u30d7\u30ed\u30c8\u30b3\u30eb\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30ea\u30bd\u30fc\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u4fdd\u8b77\u3059\u308b\u305f\u3081\u3001\u3053\u306e\u4f8b\u3048\u306f\u9069\u5207\u3067\u3059\u3002 Kerberos \u306b\u3064\u3044\u3066\u6700\u521d\u306b\u8a00\u53ca\u3057\u305f\u306e\u306f\u3001Project Athena \u74b0\u5883\u3067\u306e\u521d\u671f\u306e\u4f7f\u7528\u3092\u7d39\u4ecb\u3059\u308b\u300cAthena \u30e2\u30c7\u30eb\u300d\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3067 Kerberos \u304c\u7d39\u4ecb\u3055\u308c\u305f 1987 \u5e74\u307e\u3067\u9061\u308a\u307e\u3059\u3002<\/p>\n

Kerberos \u306b\u95a2\u3059\u308b\u8a73\u7d30\u60c5\u5831: Kerberos \u30c8\u30d4\u30c3\u30af\u306e\u5c55\u958b<\/h2>\n

Kerberos \u306f\u3001\u5e73\u6587\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u9001\u4fe1\u305b\u305a\u306b\u30e6\u30fc\u30b6\u30fc\u3068\u30b5\u30fc\u30d3\u30b9\u306e ID \u3092\u691c\u8a3c\u3059\u308b\u6697\u53f7\u5316\u3055\u308c\u305f\u8cc7\u683c\u60c5\u5831\u3067\u3042\u308b\u300c\u30c1\u30b1\u30c3\u30c8\u300d\u306e\u6982\u5ff5\u306b\u57fa\u3065\u3044\u3066\u52d5\u4f5c\u3057\u307e\u3059\u3002 Kerberos \u306e\u4e2d\u5fc3\u539f\u5247\u306f\u3001\u8a8d\u8a3c\u3001\u8a8d\u53ef\u3001\u30c1\u30b1\u30c3\u30c8\u30d9\u30fc\u30b9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3067\u3059\u3002\u30d7\u30ed\u30bb\u30b9\u306e\u4ed5\u7d44\u307f\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n

    \n
  1. \n

    \u8a8d\u8a3c<\/strong>: \u30e6\u30fc\u30b6\u30fc\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30b5\u30fc\u30d3\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3057\u305f\u3044\u5834\u5408\u3001\u30e6\u30fc\u30b6\u30fc\u540d\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u6307\u5b9a\u3057\u3066\u8a8d\u8a3c\u30b5\u30fc\u30d0\u30fc (AS) \u306b\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3057\u307e\u3059\u3002 AS \u306f\u8cc7\u683c\u60c5\u5831\u3092\u691c\u8a3c\u3057\u3001\u6210\u529f\u3057\u305f\u5834\u5408\u306f\u300c\u30c1\u30b1\u30c3\u30c8\u8a8d\u53ef\u30c1\u30b1\u30c3\u30c8\u300d(TGT) \u3092\u30e6\u30fc\u30b6\u30fc\u306b\u767a\u884c\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  2. \n

    \u8a8d\u53ef<\/strong>: TGT \u3092\u5165\u624b\u3059\u308b\u3068\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u30c1\u30b1\u30c3\u30c8\u8a8d\u53ef\u30b5\u30fc\u30d0\u30fc (TGS) \u306b\u30b5\u30fc\u30d3\u30b9\u3092\u8981\u6c42\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002 TGS \u306f TGT \u3092\u691c\u8a3c\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306e ID \u3068\u30bb\u30c3\u30b7\u30e7\u30f3 \u30ad\u30fc\u3092\u542b\u3080\u300c\u30b5\u30fc\u30d3\u30b9 \u30c1\u30b1\u30c3\u30c8\u300d(ST) \u3092\u767a\u884c\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

  3. \n

    \u30c1\u30b1\u30c3\u30c8\u30d9\u30fc\u30b9\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3<\/strong>: \u30e6\u30fc\u30b6\u30fc\u306f\u3001\u30a2\u30af\u30bb\u30b9\u3057\u305f\u3044\u30b5\u30fc\u30d3\u30b9\u306b ST \u3092\u63d0\u793a\u3057\u307e\u3059\u3002\u30b5\u30fc\u30d3\u30b9\u306f\u30c1\u30b1\u30c3\u30c8\u306e\u4fe1\u983c\u6027\u3092\u691c\u8a3c\u3057\u3001\u8981\u6c42\u3055\u308c\u305f\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u30e6\u30fc\u30b6\u30fc\u306b\u8a31\u53ef\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

    \u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u9001\u4fe1\u3059\u308b\u4ee3\u308f\u308a\u306b\u30c1\u30b1\u30c3\u30c8\u3068\u30bb\u30c3\u30b7\u30e7\u30f3 \u30ad\u30fc\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u508d\u53d7\u3084\u30ea\u30d7\u30ec\u30a4\u653b\u6483\u306e\u30ea\u30b9\u30af\u304c\u5927\u5e45\u306b\u8efd\u6e1b\u3055\u308c\u3001Kerberos \u306f\u975e\u5e38\u306b\u5b89\u5168\u306a\u8a8d\u8a3c\u30e1\u30ab\u30cb\u30ba\u30e0\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

    \u30b1\u30eb\u30d9\u30ed\u30b9\u306e\u5185\u90e8\u69cb\u9020: \u30b1\u30eb\u30d9\u30ed\u30b9\u306e\u4ed5\u7d44\u307f<\/h2>\n

    Kerberos \u306e\u5185\u90e8\u52d5\u4f5c\u306b\u306f\u3001\u5b89\u5168\u306a\u8a8d\u8a3c\u30d7\u30ed\u30bb\u30b9\u3092\u63d0\u4f9b\u3059\u308b\u305f\u3081\u306b\u9023\u643a\u3059\u308b\u3044\u304f\u3064\u304b\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n

      \n
    1. \n

      \u8a8d\u8a3c\u30b5\u30fc\u30d0\u30fc(AS)<\/strong>: \u3053\u306e\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306f\u30e6\u30fc\u30b6\u30fc\u306e\u8cc7\u683c\u60c5\u5831\u3092\u691c\u8a3c\u3057\u3001\u6700\u521d\u306e TGT \u3092\u767a\u884c\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

    2. \n

      \u30c1\u30b1\u30c3\u30c8\u4ea4\u4ed8\u30b5\u30fc\u30d0\u30fc (TGS)<\/strong>: TGT \u306e\u691c\u8a3c\u3068\u30b5\u30fc\u30d3\u30b9 \u30c1\u30b1\u30c3\u30c8\u306e\u767a\u884c\u3092\u62c5\u5f53\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

    3. \n

      \u30ad\u30fc\u914d\u5e03\u30bb\u30f3\u30bf\u30fc (KDC)<\/strong>: AS \u6a5f\u80fd\u3068 TGS \u6a5f\u80fd\u3092\u7d44\u307f\u5408\u308f\u305b\u305f\u3082\u306e\u3067\u3001\u591a\u304f\u306e\u5834\u5408\u540c\u3058\u30b5\u30fc\u30d0\u30fc\u4e0a\u306b\u5b58\u5728\u3057\u307e\u3059\u3002\u79d8\u5bc6\u9375\u3068\u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u304c\u4fdd\u7ba1\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

    4. \n

      \u4e3b\u8981<\/strong>: KDC \u306b\u767b\u9332\u3055\u308c\u3066\u3044\u308b\u30e6\u30fc\u30b6\u30fc\u307e\u305f\u306f\u30b5\u30fc\u30d3\u30b9\u3092\u8868\u3057\u3001\u4e00\u610f\u306e\u300c\u30ec\u30eb\u30e0\u300d\u306b\u3088\u3063\u3066\u8b58\u5225\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

    5. \n

      \u30ec\u30eb\u30e0<\/strong>: KDC \u304c\u52d5\u4f5c\u3059\u308b\u7ba1\u7406\u6a29\u9650\u306e\u30c9\u30e1\u30a4\u30f3\u3002<\/p>\n<\/li>\n

    6. \n

      \u30bb\u30c3\u30b7\u30e7\u30f3\u30ad\u30fc<\/strong>: \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u30b5\u30fc\u30d3\u30b9\u9593\u306e\u901a\u4fe1\u3092\u6697\u53f7\u5316\u3059\u308b\u305f\u3081\u306b\u30bb\u30c3\u30b7\u30e7\u30f3\u3054\u3068\u306b\u751f\u6210\u3055\u308c\u308b\u4e00\u6642\u7684\u306a\u6697\u53f7\u5316\u30ad\u30fc\u3002<\/p>\n<\/li>\n<\/ol>\n

      Kerberos \u306e\u4e3b\u8981\u306a\u6a5f\u80fd\u306e\u5206\u6790<\/h2>\n

      Kerberos \u306f\u3001\u305d\u306e\u5e83\u7bc4\u306a\u63a1\u7528\u3068\u6210\u529f\u306b\u8ca2\u732e\u3059\u308b\u3044\u304f\u3064\u304b\u306e\u91cd\u8981\u306a\u6a5f\u80fd\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002<\/p>\n

        \n
      1. \n

        \u5f37\u529b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3<\/strong>: \u30c1\u30b1\u30c3\u30c8\u3068\u30bb\u30c3\u30b7\u30e7\u30f3 \u30ad\u30fc\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u5f37\u5316\u3055\u308c\u3001\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u76d7\u96e3\u3084\u508d\u53d7\u306e\u30ea\u30b9\u30af\u304c\u6700\u5c0f\u9650\u306b\u6291\u3048\u3089\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

      2. \n

        \u30b7\u30f3\u30b0\u30eb \u30b5\u30a4\u30f3\u30aa\u30f3 (SSO)<\/strong>: \u8a8d\u8a3c\u3055\u308c\u308b\u3068\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u8cc7\u683c\u60c5\u5831\u3092\u518d\u5165\u529b\u305b\u305a\u306b\u8907\u6570\u306e\u30b5\u30fc\u30d3\u30b9\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u305f\u3081\u3001\u30e6\u30fc\u30b6\u30fc \u30a8\u30af\u30b9\u30da\u30ea\u30a8\u30f3\u30b9\u304c\u7c21\u7d20\u5316\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

      3. \n

        \u30b9\u30b1\u30fc\u30e9\u30d3\u30ea\u30c6\u30a3<\/strong>: Kerberos \u306f\u5927\u898f\u6a21\u306a\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3092\u51e6\u7406\u3067\u304d\u308b\u305f\u3081\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba \u30ec\u30d9\u30eb\u306e\u5c0e\u5165\u306b\u9069\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n

      4. \n

        \u30af\u30ed\u30b9\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u30b5\u30dd\u30fc\u30c8<\/strong>: \u3055\u307e\u3056\u307e\u306a\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3068\u4e92\u63db\u6027\u304c\u3042\u308a\u3001\u3055\u307e\u3056\u307e\u306a\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u7d71\u5408\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

        \u30b1\u30eb\u30d9\u30ed\u30b9\u306e\u7a2e\u985e<\/h2>\n

        Kerberos \u306b\u306f\u3055\u307e\u3056\u307e\u306a\u30d0\u30fc\u30b8\u30e7\u30f3\u3068\u5b9f\u88c5\u304c\u3042\u308a\u3001\u6700\u3082\u6ce8\u76ee\u3059\u3079\u304d\u3082\u306e\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n\n\n\n\n\n\n\n
        \u30b1\u30eb\u30d9\u30ed\u30b9\u306e\u7a2e\u985e<\/th>\n\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n
        MIT\u30b1\u30eb\u30d9\u30ed\u30b9<\/td>\n\u30aa\u30ea\u30b8\u30ca\u30eb\u3067\u6700\u3082\u5e83\u304f\u4f7f\u7528\u3055\u308c\u3066\u3044\u308b\u5b9f\u88c5\u3002<\/td>\n<\/tr>\n
        Microsoft Active Directory (AD) Kerberos<\/td>\nWindows \u74b0\u5883\u3067\u4f7f\u7528\u3055\u308c\u308b MIT Kerberos \u306e\u62e1\u5f35\u6a5f\u80fd\u3002<\/td>\n<\/tr>\n
        \u30d8\u30a4\u30e0\u30c0\u30eb\u30fb\u30b1\u30eb\u30d9\u30ed\u30b9<\/td>\n\u4ee3\u66ff\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u5b9f\u88c5\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

        Kerberos\u306e\u4f7f\u7528\u65b9\u6cd5\u3068\u4f7f\u7528\u306b\u95a2\u9023\u3059\u308b\u554f\u984c\u3068\u305d\u306e\u89e3\u6c7a\u7b56<\/h2>\n

        Kerberos \u306f\u3001\u6b21\u306e\u3088\u3046\u306a\u3055\u307e\u3056\u307e\u306a\u30b7\u30ca\u30ea\u30aa\u306b\u5fdc\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n

          \n
        1. \n

          \u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u8a8d\u8a3c<\/strong>: \u4f01\u696d\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3068\u30ea\u30bd\u30fc\u30b9\u3092\u4fdd\u8b77\u3057\u3001\u8a31\u53ef\u3055\u308c\u305f\u62c5\u5f53\u8005\u306e\u307f\u304c\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

        2. \n

          Web\u8a8d\u8a3c<\/strong>: Web \u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3068\u30b5\u30fc\u30d3\u30b9\u3092\u4fdd\u8b77\u3057\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u9632\u6b62\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

        3. \n

          \u96fb\u5b50\u30e1\u30fc\u30eb\u30b5\u30fc\u30d3\u30b9<\/strong>: \u96fb\u5b50\u30e1\u30fc\u30eb \u30b5\u30fc\u30d0\u30fc\u3078\u306e\u5b89\u5168\u306a\u30a2\u30af\u30bb\u30b9\u3092\u78ba\u4fdd\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u901a\u4fe1\u3092\u4fdd\u8b77\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

          \u3088\u304f\u3042\u308b\u554f\u984c\u3068\u89e3\u6c7a\u7b56:<\/h3>\n
            \n
          1. \n

            \u30af\u30ed\u30c3\u30af\u30b9\u30ad\u30e5\u30fc<\/strong>: \u30b5\u30fc\u30d0\u30fc\u306e\u30af\u30ed\u30c3\u30af\u9593\u306e\u540c\u671f\u306e\u554f\u984c\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u30a8\u30e9\u30fc\u304c\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u5b9a\u671f\u7684\u306a\u6642\u523b\u540c\u671f\u306b\u3088\u308a\u3001\u3053\u306e\u554f\u984c\u306f\u89e3\u6c7a\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n

          2. \n

            \u5358\u4e00\u969c\u5bb3\u70b9<\/strong>: KDC \u306f\u5358\u4e00\u969c\u5bb3\u70b9\u306b\u306a\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u3092\u8efd\u6e1b\u3059\u308b\u305f\u3081\u306b\u3001\u7ba1\u7406\u8005\u306f\u5197\u9577 KDC \u3092\u5c55\u958b\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

          3. \n

            \u30d1\u30b9\u30ef\u30fc\u30c9\u30dd\u30ea\u30b7\u30fc<\/strong>: \u30d1\u30b9\u30ef\u30fc\u30c9\u304c\u5f31\u3044\u3068\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304c\u5371\u967a\u306b\u3055\u3089\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u5f37\u529b\u306a\u30d1\u30b9\u30ef\u30fc\u30c9 \u30dd\u30ea\u30b7\u30fc\u3092\u9069\u7528\u3059\u308b\u3068\u3001\u5805\u7262\u6027\u3092\u7dad\u6301\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

            \u4e3b\u306a\u7279\u5fb4\u3068\u985e\u4f3c\u7528\u8a9e\u3068\u306e\u6bd4\u8f03<\/h2>\n\n\n\n\n\n\n\n\n\n
            \u7279\u6027<\/th>\n\u30b1\u30eb\u30d9\u30ed\u30b9<\/th>\nOAuth<\/th>\nLDAP<\/th>\n<\/tr>\n<\/thead>\n
            \u30bf\u30a4\u30d7<\/td>\n\u8a8d\u8a3c\u30d7\u30ed\u30c8\u30b3\u30eb<\/td>\n\u8a8d\u53ef\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af<\/td>\n\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30a2\u30af\u30bb\u30b9\u30d7\u30ed\u30c8\u30b3\u30eb<\/td>\n<\/tr>\n
            \u30e1\u30a4\u30f3\u6a5f\u80fd<\/td>\n\u8a8d\u8a3c<\/td>\n\u8a8d\u53ef<\/td>\n\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9<\/td>\n<\/tr>\n
            \u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3<\/td>\n\u30c1\u30b1\u30c3\u30c8\u3068\u30bb\u30c3\u30b7\u30e7\u30f3\u30ad\u30fc<\/td>\n\u30c8\u30fc\u30af\u30f3<\/td>\n\u5e73\u6587\u307e\u305f\u306f\u5b89\u5168\u306a\u30c1\u30e3\u30cd\u30eb<\/td>\n<\/tr>\n
            \u4f7f\u7528\u4e8b\u4f8b<\/td>\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u8a8d\u8a3c<\/td>\nAPI\u30a2\u30af\u30bb\u30b9\u5236\u5fa1<\/td>\n\u30e6\u30fc\u30b6\u30fc\u3068\u30ea\u30bd\u30fc\u30b9\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea<\/td>\n<\/tr>\n
            \u4eba\u6c17<\/td>\n\u5e83\u304f\u63a1\u7528\u3055\u308c\u3066\u3044\u308b<\/td>\nWeb\u30b5\u30fc\u30d3\u30b9\u3067\u4eba\u6c17\u306e<\/td>\n\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u30b5\u30fc\u30d3\u30b9\u3067\u3088\u304f\u3042\u308b\u3053\u3068<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

            Kerberos \u306b\u95a2\u9023\u3059\u308b\u5c06\u6765\u306e\u5c55\u671b\u3068\u30c6\u30af\u30ce\u30ed\u30b8\u30fc<\/h2>\n

            \u30c6\u30af\u30ce\u30ed\u30b8\u30fc\u304c\u9032\u6b69\u3059\u308b\u306b\u3064\u308c\u3066\u3001Kerberos \u306f\u65b0\u3057\u3044\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u8ab2\u984c\u3084\u8981\u4ef6\u306b\u5bfe\u5fdc\u3059\u308b\u305f\u3081\u306b\u9032\u5316\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u5c06\u6765\u306e\u767a\u5c55\u306e\u53ef\u80fd\u6027\u3068\u3057\u3066\u306f\u6b21\u306e\u3088\u3046\u306a\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

              \n
            1. \n

              \u5f37\u5316\u3055\u308c\u305f\u6697\u53f7\u5316<\/strong>: \u9032\u5316\u3059\u308b\u8105\u5a01\u306b\u8010\u3048\u308b\u305f\u3081\u306b\u3001\u3088\u308a\u5f37\u529b\u306a\u6697\u53f7\u5316\u30a2\u30eb\u30b4\u30ea\u30ba\u30e0\u3092\u5b9f\u88c5\u3002<\/p>\n<\/li>\n

            2. \n

              \u30af\u30e9\u30a6\u30c9\u3068IoT\u306e\u7d71\u5408<\/strong>: \u30af\u30e9\u30a6\u30c9\u30d9\u30fc\u30b9\u304a\u3088\u3073 IoT \u74b0\u5883\u3067\u306e\u30b7\u30fc\u30e0\u30ec\u30b9\u306a\u7d71\u5408\u306e\u305f\u3081\u306b Kerberos \u3092\u9069\u5fdc\u3055\u305b\u307e\u3059\u3002<\/p>\n<\/li>\n

            3. \n

              \u591a\u8981\u7d20\u8a8d\u8a3c<\/strong>: \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5f37\u5316\u3059\u308b\u305f\u3081\u306e\u591a\u8981\u7d20\u8a8d\u8a3c\u65b9\u6cd5\u306e\u7d71\u5408\u3002<\/p>\n<\/li>\n<\/ol>\n

              \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306e\u4f7f\u7528\u65b9\u6cd5\u307e\u305f\u306f Kerberos \u3068\u306e\u95a2\u9023\u4ed8\u3051\u65b9\u6cd5<\/h2>\n

              \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3068 Kerberos \u306f\u9023\u643a\u3057\u3066\u52d5\u4f5c\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u30d1\u30d5\u30a9\u30fc\u30de\u30f3\u30b9\u3092\u5411\u4e0a\u3055\u305b\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u306f\u6b21\u306e\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n

                \n
              1. \n

                \u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u3092\u5f37\u5316\u3059\u308b<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u4ef2\u4ecb\u8005\u3068\u3057\u3066\u6a5f\u80fd\u3057\u3001\u30e6\u30fc\u30b6\u30fc\u306e IP \u30a2\u30c9\u30ec\u30b9\u3092\u4fdd\u8b77\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5c64\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n

              2. \n

                \u30ed\u30fc\u30c9\u30d0\u30e9\u30f3\u30b7\u30f3\u30b0<\/strong>\uff1a\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u8a8d\u8a3c\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u3055\u307e\u3056\u307e\u306a KDC \u306b\u5206\u6563\u3057\u3066\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u52b9\u7387\u7684\u306b\u51e6\u7406\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n

              3. \n

                \u30ad\u30e3\u30c3\u30b7\u30f3\u30b0<\/strong>\uff1a\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u8a8d\u8a3c\u30c1\u30b1\u30c3\u30c8\u3092\u30ad\u30e3\u30c3\u30b7\u30e5\u3067\u304d\u308b\u305f\u3081\u3001KDC \u306e\u8ca0\u8377\u304c\u8efd\u6e1b\u3055\u308c\u3001\u5fdc\u7b54\u6642\u9593\u304c\u77ed\u7e2e\u3055\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n

                \u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n

                Kerberos \u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u78ba\u8a8d\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

                  \n
                1. MIT Kerberos \u30c9\u30ad\u30e5\u30e1\u30f3\u30c8<\/a><\/li>\n
                2. Microsoft Active Directory Kerberos<\/a><\/li>\n
                3. \u30d8\u30a4\u30e0\u30c0\u30eb\u30fb\u30b1\u30eb\u30d9\u30ed\u30b9\u30fb\u30d7\u30ed\u30b8\u30a7\u30af\u30c8<\/a><\/li>\n<\/ol>","protected":false},"featured_media":477763,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477762","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about Kerberos: An In-Depth Overview<\/mark>","faq_items":[{"question":"What is Kerberos, and why is it important?","answer":"

                  Kerberos is a network authentication protocol designed to secure user identities and provide a reliable way to access services over non-secure networks. It ensures strong security by using tickets and session keys instead of transmitting passwords, minimizing the risk of unauthorized access and interception.<\/p>"},{"question":"How did Kerberos get its name and where was it first mentioned?","answer":"

                  Kerberos derived its name from the three-headed dog \"Cerberus\" in Greek mythology, guarding the gates of the underworld. The first mention of Kerberos can be traced back to 1987 when it was introduced in the \"Athena Model\" documentation for securing the Project Athena distributed computing environment.<\/p>"},{"question":"How does Kerberos work internally?","answer":"

                  Kerberos relies on three main components: the Authentication Server (AS), the Ticket Granting Server (TGS), and the Key Distribution Center (KDC). Users request access by presenting their credentials to the AS, which issues a Ticket Granting Ticket (TGT) upon successful authentication. The TGT allows users to request service tickets from the TGS, enabling access to desired services using temporary session keys.<\/p>"},{"question":"What are the key features of Kerberos?","answer":"

                  Kerberos offers strong security through ticket-based authentication, ensuring data confidentiality and preventing password theft. It supports Single Sign-On (SSO) for seamless access to multiple services without constant reauthentication. Kerberos is scalable, making it suitable for large enterprise networks, and it enjoys cross-platform support, integrating with various operating systems and applications.<\/p>"},{"question":"Are there different types of Kerberos implementations?","answer":"

                  Yes, there are various types of Kerberos, with the most notable being MIT Kerberos (the original and widely used implementation), Microsoft Active Directory (AD) Kerberos (used in Windows environments), and Heimdal Kerberos (an open-source alternative).<\/p>"},{"question":"What are the common problems associated with Kerberos and their solutions?","answer":"

                  Common issues include clock skew causing authentication failures (resolved through time synchronization), single points of failure (mitigated with redundant KDCs), and weak passwords (addressed by enforcing strong password policies).<\/p>"},{"question":"How does Kerberos compare to OAuth and LDAP?","answer":"

                  Kerberos is primarily an authentication protocol, while OAuth is an authorization framework used in web services, and LDAP is a directory access protocol for user and resource directory services.<\/p>"},{"question":"What are the potential future developments for Kerberos?","answer":"

                  The future of Kerberos may involve enhanced cryptography to withstand emerging threats, integration in cloud and IoT environments, and the incorporation of multi-factor authentication methods for added security.<\/p>"},{"question":"How can proxy servers complement Kerberos?","answer":"

                  Proxy servers enhance privacy by acting as intermediaries, distributing authentication requests for load balancing, and caching tickets to improve performance and reduce KDC load.<\/p>"},{"question":"Where can I find more information about Kerberos?","answer":"

                  For additional information about Kerberos, you can refer to the MIT Kerberos Documentation, Microsoft Active Directory Kerberos resources, and the Heimdal Kerberos Project website.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477762\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/477763"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=477762"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}