Kerberos is an authentication mechanism used to verify the identity of a user or host. This page contains information about evaluating, developing, and troubleshooting Kerberos, the preferred authentication method for services in Windows Server 2008.
Product Evaluation
-
What's New in Windows Server 2003 Kerberos Authentication
This document describes the features in Kerberos authentication that were introduced in Windows Server 2003. You can use this document to compare the improvements in Windows Vista and Windows Server 2008.
-
Kerberos Enhancements in Windows Vista and Windows Server 2008
This topic provides information about Kerberos enhancements in Windows Vista and Windows Server 2008, including the use of Advanced Encryption Standard (AES) encryption and usage scenarios with previous versions of Windows.
-
Changes in Kerberos Authentication in Windows 7 and Windows Server 2008 R2
This product evaluation topic for the IT professional describes the cryptographic enhancements to Microsoft's implementation of Kerberos version 5 (v5) in Windows 7 and Windows Server 2008 R2.
Development
-
MSDN: Microsoft Kerberos
This topic describes Microsoft's implementation of the Kerberos version 5 (v5) protocol and links to information about basic authentication concepts, Kerberos subprotocols, Kerberos components, and SSPI/Kerberos interoperability with GSSAPI.
Troubleshooting
-
TechNet Events and Errors Message Center: Advanced Search
You can use the Advanced Search function of TechNet's Events and Errors Message Center to find detailed message explanations, recommended user actions, and links to additional support and resources for Kerberos authentication.
-
Troubleshooting Kerberos
This guide provides troubleshooting information for Kerberos authentication in Windows 2000 and Windows Server 2003 domains. It is designed to help you identify and resolve problems that are related to the Kerberos v5 authentication protocol when these Windows versions are present in your environment.
-
Troubleshooting Kerberos Errors
This white paper helps you troubleshoot Kerberos authentication problems by outlining troubleshooting basics, explaining the causes of common Kerberos errors, and summarizing common troubleshooting tools.
-
Troubleshooting Kerberos Delegation
This white paper explains how to troubleshoot delegation issues that can arise in Kerberos authentication scenarios, summarizes required infrastructure, and describes Windows authentication scenarios when Windows versions earlier than Windows Server 2008 are present in your environment.
-
Kerberos Client
This document contains event details, resolution steps, and verification steps for Kerberos client troubleshooting. Kerberos clients are applications acting on behalf of users who need access to a resource, such as opening a file, querying a database, or printing a document.
-
Kerberos Key Distribution Center
This document contains event details, resolution steps, and verification steps for Kerberos Key Distribution Center (KDC) troubleshooting. The Kerberos KDC is a network service that supplies session tickets and temporary session keys to users and computers within an Active Directory domain.
Support
Additional Resources