Kerbeiros

Kerberos client

Concepts

• KDC (Key Distribution Center): Service that distributes the tickets. The host that provides this server is also called KDC.
• TGS (Ticket Granting Server): Ticket used to authenticate the user against a specified service.
• TGT (Ticket Granting Ticket): Ticket used to retrieve the TGS's from the KDC.

Examples

Asking for a TGT:

```rust use kerbeiros::; use ascii::AsciiString; use std::net::;

// Prepare the arguments let realm = AsciiString::fromascii("CONTOSO.COM").unwrap(); let kdcaddress = IpAddr::V4(Ipv4Addr::new(192, 168, 0, 1)); let username = AsciiString::fromascii("Bob").unwrap(); let userkey = Key::Password("S3cr3t".to_string());

// Request the TGT let mut tgtrequester = TgtRequester::new(realm, kdcaddress); let credential = tgtrequester.request(&username, Some(&userkey)).unwrap();

// Save the ticket into a Windows format file credential.saveintokrbcredfile("bob_tgt.krb");

// Save the ticket into a Linux format file credential.saveintoccachefile("bobtgt.ccache"); ```

References

• RFC 4120: The Kerberos Network Authentication Service (V5)
• [MS-KILE]: Kerberos Protocol Extensions