📜  Kerberos 和 NTLM 之间的区别

📅  最后修改于: 2021-09-11 04:19:25             🧑  作者: Mango

1. Kerberos:
Kerberos 是一种基于票据的身份验证系统,用于在登录系统时对用户信息进行身份验证。 Kerberos 基于对称密钥加密,依赖于可靠的第三方,并在身份验证阶段处理私钥加密。开发了不同版本的 Kerberos 以增强身份验证的安全性。 Kerberos 通常在 Windows 2000、Windows XP 和更高版本的 Windows 等 Microsoft 产品中实现。

2. NTLM:
NTLM(新技术 LAN 管理器)是一种专有的 Microsoft 身份验证协议。 NTLM 也是基于对称密钥加密技术,需要资源服务器为用户提供身份验证、完整性和机密性。 NTLM 不支持身份验证委托和两因素身份验证。 NTLM 通常在 Windows 95、Windows 98、Windows ME、NT 4.0 等较早的 Windows 版本中实现。

Kerberos 和 NTLM 的区别:

S.No. Kerberos NTLM
1. Kerberos is an open source software and offers free services. NTLM is the proprietary Microsoft authentication protocol.
2. Kerberos supports delegation of authentication in multi-tier application. NTLM does not support delegation of authentication.
3. Kerberos supports two factor authentication such as smart card logon. NTLM does not provide smart card logon.
4. Kerberos has the feature of mutual authentication. NTLM does not have the feature of mutual authentication.
5. Kerberos provides high security. While NTLM is less secured as compared to kerberos.
6. Kerobos is supported in Microsoft Windows 2000, Windows XP and later windows versions. NTLM is also supported in earlier windows versions such as Windows 95, Windows 98, Windows ME, NT 4.0.