https://community.cloudera.com/t5/Archives-of-Support-Questions/Why-we-have-to-go-with-Kerberos-even-we-have-LDAP-What-are/m-p/174397#M46148 Tue, 15 Nov 2016 04:08:27 GMT prasad4u_com 2016-11-15T04:08:27Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Why-we-have-to-go-with-Kerberos-even-we-have-LDAP-What-are/m-p/174397#M46148 Tue, 15 Nov 2016 04:08:27 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Why-we-have-to-go-with-Kerberos-even-we-have-LDAP-What-are/m-p/174397#M46148 prasad4u_com 2016-11-15T04:08:27Z https://community.cloudera.com/t5/Archives-of-Support-Questions/Why-we-have-to-go-with-Kerberos-even-we-have-LDAP-What-are/m-p/174398#M46149 <P>Hello <A rel="user" href="https://community.cloudera.com/users/1966/prasad4ucom.html" nodeid="1966">@Ram D</A>,</P><P>There are several advantages with Kerberos over LDAP. The most prominent one is - Kerberos is more secured when compared to LDAP. Here's how:</P><P>1. Kerberos is conceptualized and implemented as authentication protocol from the beginning where the protecting the user's credential is given utmost importance. Whereas LDAP is actually a directory access protocol (a la telephone directory) and not meant for authentication originally. </P><P>2. User's password *<STRONG>never</STRONG>* travels over wire when using Kerberos. Of course, you can secure LDAP communication with SSL but then it is 'encrypted password' which is traveling over wire.</P><P>There are couple of reasons why Kerberos has been chosen by Hadoop world as de fecto authentication standard.</P><P>Hope this helps.</P> Tue, 15 Nov 2016 17:44:11 GMT https://community.cloudera.com/t5/Archives-of-Support-Questions/Why-we-have-to-go-with-Kerberos-even-we-have-LDAP-What-are/m-p/174398#M46149 VR46 2016-11-15T17:44:11Z