Support Questions

Find answers, ask questions, and share your expertise

Why we have to go with Kerberos, even we have LDAP? What are kerberos advantages over LDAP?

Expert Contributor
 
1 ACCEPTED SOLUTION

Guru

Hello @Ram D,

There are several advantages with Kerberos over LDAP. The most prominent one is - Kerberos is more secured when compared to LDAP. Here's how:

1. Kerberos is conceptualized and implemented as authentication protocol from the beginning where the protecting the user's credential is given utmost importance. Whereas LDAP is actually a directory access protocol (a la telephone directory) and not meant for authentication originally.

2. User's password *never* travels over wire when using Kerberos. Of course, you can secure LDAP communication with SSL but then it is 'encrypted password' which is traveling over wire.

There are couple of reasons why Kerberos has been chosen by Hadoop world as de fecto authentication standard.

Hope this helps.

View solution in original post

1 REPLY 1

Guru

Hello @Ram D,

There are several advantages with Kerberos over LDAP. The most prominent one is - Kerberos is more secured when compared to LDAP. Here's how:

1. Kerberos is conceptualized and implemented as authentication protocol from the beginning where the protecting the user's credential is given utmost importance. Whereas LDAP is actually a directory access protocol (a la telephone directory) and not meant for authentication originally.

2. User's password *never* travels over wire when using Kerberos. Of course, you can secure LDAP communication with SSL but then it is 'encrypted password' which is traveling over wire.

There are couple of reasons why Kerberos has been chosen by Hadoop world as de fecto authentication standard.

Hope this helps.

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.