You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by bu...@apache.org on 2014/04/11 04:31:38 UTC
svn commit: r905768 - in /websites/staging/directory/trunk/content: ./
apacheds/kerberos-ug/1.1.6-as.html
Author: buildbot
Date: Fri Apr 11 02:31:38 2014
New Revision: 905768
Log:
Staging update by buildbot for directory
Modified:
websites/staging/directory/trunk/content/ (props changed)
websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.6-as.html
Propchange: websites/staging/directory/trunk/content/
------------------------------------------------------------------------------
--- cms:source-revision (original)
+++ cms:source-revision Fri Apr 11 02:31:38 2014
@@ -1 +1 @@
-1586538
+1586540
Modified: websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.6-as.html
==============================================================================
--- websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.6-as.html (original)
+++ websites/staging/directory/trunk/content/apacheds/kerberos-ug/1.1.6-as.html Fri Apr 11 02:31:38 2014
@@ -152,7 +152,7 @@
<h1 id="116-as-authentication-server">1.1.6 - AS (Authentication Server)</h1>
<p>One of the two server components of a <strong>Kerberos</strong> server is the Authentication Server, which authenticates clients, and issues tickets (<strong>TGT</strong>, or <em>Ticket Granting Ticket</em>) that the user can send to the <strong>TGS</strong> to get a service ticket.</p>
<DIV class="info" markdown="1">
-The <B>TGT</B>, or <EM>Ticket Granting Ticket</EM>, is a ticket that a client can use to get a service ticket. In fact, the authentication server considers the **TGS** as just another service, and generates a ticket for the user to access this service.
+The <B>TGT</B>, or <EM>Ticket Granting Ticket</EM>, is a ticket that a client can use to get a service ticket. In fact, the authentication server considers the <B>TGS</B> as just another service, and generates a ticket for the user to access this service.
</DIV>
<p>The beauty of the <strong>AS</strong> is that it does not verify that the client issuing a request is a valid client : it just returns a tickat that an attacker won't be able to process if he does not have the client's password.</p>