Tag Info

New answers tagged

1

You could use assymetric crypto to sign the commands. You can then use public key authentication to verify if the commands were signed by someone who is in the allowed list. Each user needs to generate a key-pair in their app and you need to import their public key. You can then also revoke access by removing their public key from the access list. Access ...


3

This is stopped by authenticators. Whenever you present a Kerberos ticket, it must be accompanied by an authenticator, which is encrypted using the session key and contains (among other info) a timestamp. The server checks that the timestamp is recent (in Kerberos 4, this means "within 5 minutes;" in 5, it is configurable, but 5 minutes is the default) and ...



Top 50 recent answers are included