Active Directory uses the Kerberos protocol and LDAP as follows:
• Active Directory uses the Kerberos protocol for authentication (by default).
• Active Directory uses LDAP for authorization (by default).
• Active Directory can use LDAP for authentication (optionally).
Because Active Directory, by default, uses the Kerberos v5 protocol for authentication and LDAP v3 for authorization, Active Directory is compatible with Kerberos v5 clients and LDAP v3 clients across all platforms, including UNIX and Linux. Together, Active Directory authentication and authorization can provide a strong, easy-to-administer security system for a mixed network.
Continue reading ‘Active Directory, Kerberos, LDAP and Unix’