http://wiki.lli.be/index.php?action=history&feed=atom&title=Kerberos_double_hopKerberos double hop - Historique des versions2026-05-14T13:46:44ZHistorique des versions pour cette page sur le wikiMediaWiki 1.45.3http://wiki.lli.be/index.php?title=Kerberos_double_hop&diff=233&oldid=prevLli : Page créée avec « 602x602px 1. users access <nowiki>http://pra-repu</nowiki> using anonymous credentials. 2. The reporting Server returns error 401.2 and returns an Authenticate header. 3. users request a ticket for the SPN created by the local network: <nowiki>http://pra-repu</nowiki> 4. The KDC returns the ticket if the SPN is found. This is encrypted using the registered account master key for the SPN (fednot\ge... »2023-03-24T19:13:39Z<p>Page créée avec « <a href="/index.php/Fichier:Kerberoslli.png" title="Fichier:Kerberoslli.png">gauche|vignette|602x602px</a> 1. users access <nowiki>http://pra-repu</nowiki> using anonymous credentials. 2. The reporting Server returns error 401.2 and returns an Authenticate header. 3. users request a ticket for the SPN created by the local network: <nowiki>http://pra-repu</nowiki> 4. The KDC returns the ticket if the SPN is found. This is encrypted using the registered account master key for the SPN (fednot\ge... »</p>
<p><b>Nouvelle page</b></p><div>[[Fichier:Kerberoslli.png|gauche|vignette|602x602px]]<br />
1. users access <nowiki>http://pra-repu</nowiki> using anonymous credentials.<br />
<br />
2. The reporting Server returns error 401.2 and returns an Authenticate header.<br />
<br />
3. users request a ticket for the SPN created by the local network: <nowiki>http://pra-repu</nowiki><br />
<br />
4. The KDC returns the ticket if the SPN is found. This is encrypted using the registered account master key for the SPN (fednot\gen_rep).<br />
<br />
5. Users authenticates with the ticket for the web application.<br />
<br />
6. The Web App account decrypts the ticket and validates it.<br />
<br />
7. Web App account requests ticket for the SPN created by the SQL Client: MSSqlSvc/ccsql-s03.fednot.be:1433.<br />
<br />
8. The KDC returns the ticket if the SPN is found. This is encrypted using the registered account master key for the SPN (fednot \gen_sql).<br />
<br />
9. The web application service authenticates with the SQL database using the Web App account ticket and impersonates the user using delegation rights.<br />
<br />
10. The SQL service account decrypts the ticket and validates it.<br />
<br />
11. The SQL Server returns the request data to the WSS Server.<br />
<br />
12. The WSS Server returns the webpage.<br />
[[Catégorie:Windows]]</div>Lli