Análise da integração entre o Kerberos e o OpenLDAP

Abstract

Due to the difficulty of managing users in different services of computer network, today there is a tendency to centralize data via LDAP (Lightweight Directory Access Protocol). However, computer networks are not secure, then the need to integrate some service or protocol that secures the network. The traffic of user authentication and authorization services should be confidential, since that information is stolen may result in a security breach. The Kerberos protocol provides an extra layer of security. This work presents the Kerberos integrated with LDAP, to evaluate the impacts on traffic to add a high level of network security. The evaluation was performed through four case studies: only authentication with SSH, SSH authentication and OpenLDAP, Kerberos authentication with SSH and finally SSH authentication with OpenLDAP and Kerberos, and through traffic analysis and packet. In a virtualized environment, we performed measurements of traffic before and after the implementation of Kerberos with LDAP. After capturing packets regarding SSH access using Kerberos as authentication, it was observed that the integration does not significantly affect network traffic.