Windows verifies the type

submitted 29-07-2010

Try every possible means to control visiting and confirm identity.Windows of the computer proves it is a user that prove they have the right in different types of verification in Windows Systematic course of visit. Windows proves that can be used Kerberos, SPNEGO and NTLM do. SPNEGO represents " Negotiate safely " . Kerberos proves that chooses name of the first of dog of these 3 residences which safeguards entry of the Greek society of ground floor. SPNEGO can represent the general security service application program interface negotiations mechanism simple and protecting too. NTLM represents NT LAN management software.

NTLM proves

Windows NTLM proves it is a challenge / responds to the law. Users input his ID and then is input an effective password by the challenge. If an invalid password is entered, users are forbidden being close to the system. If users can't use correct password log-in, user's account is dismissed. NTLM is used in permanent TCP among computer believing connecting. NTLM proves that can be encrypted by the well-balanced key and set up and improves the security of the data. NTLM controls NTLM to prove safely and support providers in Microsoft server. This kind of verification is used in the server of the network, server of the network and computer network. Windows NTLM prove common to use in the network that is protected.

Kerberos proves

Kerberos use secret key verification, use one secret key that share that system produce that agree. Kerberos uses a key to assign the centre, it is KDC that this is called too. KDC distributes the key used jointly for one used for encrypting and deciphering. Kerberos operates two kinds of services. A distribution is verified (require a secret key) in advance And prove (the confirmation of this secret key) Request. Other services permit a ticket served. If one after with this server, this computer is in verification " The ticket, " It is that meeting that allows computer and its user to visit to application and website. Because Kerberos does not rely on a concrete computer link or host computer, it is thought as the verification method of a statelessness.

Kerberos can be used in acting server and network server to verify.

Kerberos prove might prove, use NTLM even, before they can make great efforts to prove taking Kerberos that visit a computer network, because users must be through challenging / reflecting NTLM to verify. Windows server often uses Kerberos for HTTP server and agent of Internet.

SPNEGO proves

Not at the time of a verification method among them that confirm in advance in two computers or servers, SPNEGO is used. In Windows SPNEGO verifies, customer's computer offers the catalogue of a verification method that can be got. Serve then choose to prove that probably thinks the method of the work for it. Other type of Windows does not prove in order to choose to prove that offer this kind of choice for method. Using two computers that SPNEGO verifies can choose Kerberos as the money of their verification.

When doing through the positive catalogue, simple Windows signs in verification and verifies with SPNEGO.