身份验证服务创建一个TGT。
您可以同时使用多个身份验证服务。
把用户名和密码发送到身份验证服务。
指示身份验证服务的位置。
整个TGT 使用身份验证服务的秘密密钥加密。
The entire TGT is encrypted with the secret key of authentication service.
身份验证服务与Kerberos中的KDC相同。
The authentication service is the same as the KDC in Kerberos.
身份验证服务是实际向LDAP验证用户身份的服务。
The authentication service is the service that actually authenticates users to LDAP.
客户端使用它的秘密密钥解密来自身份验证服务的消息。
The client decrypts the message from the authentication service using client secret key.
使用身份验证服务的方式随所选择的模式的不同而不同。
The way in which the authentication service is used differs depending on which mode is selected.
客户端将一个PSTkt请求发送到身份验证服务。
The client sends a PSTkt request to the authentication service.
身份验证服务不支持将身份验证票证嵌入到URL中。
The authentication service does not support embedding the authentication ticket in the URL.
身份验证服务获取PSTkt请求，使用其秘密密钥解密它。
The authentication service gets the PSTkt request and decrypts it using its secret key.
TGT包含供在客户端与身份验证服务之间使用的会话密钥。
TGT carries session key for use between the client and authentication service.
在使用单点登录时，所有应用程序使用一个集中的身份验证服务。
With single sign-on, a single, central authentication service is used by all applications.
DCE身份验证服务是Kerberos模型中的密钥分发服务。
The DCE authentication service is the key distribution service in the Kerberos model.
最后我们还没来得及增加新的服务能力，身份验证服务就被推到了极限。
The last of these pushed the authentication service over its maximum capacity before we could complete putting new capacity in place.
Kerberos主体是诸如用户、机器或服务这样需要身份验证服务的一些个体。
Kerberos principals are entities such as users, machines or services which need authentication service.
此信息供前两个服务(身份验证服务和特权服务)和DCEAPI使用。
This information is used by the first two services (authentication service and privilege service) and the DCE APIs. It primarily consists of the following information.
现在，客户端拥有了会话密钥，它可以使用该密钥向身份验证服务验证自身。
At this point, client has the session key that client can use for authenticating itself to the authentication service.
这个密钥由身份验证服务生成，由客户端和身份验证服务共同用于所有未来通信。
This key is generated by the authentication service and is Shared between the client and the authentication service for all future communications.
身份验证服务构造一条响应消息，其中包含PSTkt和新会话密钥的一个副本。
The authentication service constructs the response message containing the PSTkt and a copy of the new session key.
在确认了PSTkt请求中的相关字段之后，身份验证服务继续生成一个STkt。
After confirming the associated fields in the PSTkt request, the authentication service proceeds to generate an STkt.
本文介绍了如何实现和部署自定义身份验证服务，以及如何从JMS应用程序使用它。
This article has shown how to implement and deploy a custom authentication service, and how to use it from JMS applications.
LDAP身份验证要想正确地工作，需要配置两个服务：系统命名服务和身份验证服务。
Two services need to be configured for LDAP authentication to work correctly, the system naming service and the authentication service.
在DCE中使用此身份验证服务，RPC能够向用户提供数据可用性保证和数据隐私保障。
Using this authentication service with DCE, RPC provides data availability and data privacy to users.
WI还提供了对身份验证服务的访问，允许应用程序对用户进行身份验证，并管理组与角色。
Wi also provides access to authentication services, allowing applications to authenticate users and manage groups and roles.
检查了请求客户端的身份后，身份验证服务构造一个STkt，供客户端用来验证目标服务器。
After checking the identity of client request, the authentication service constructs the STkt that would allow client to authenticate with target server.
本文向您展示如何存储用户的帐号信息，并修改身份验证服务来使用LDAP获取所需要的信息。
This article shows you how to store user account information and modify the authentication services to use LDAP to retrieve needed information as well.
身份验证服务然后使用TGT会话密钥加密stkt和会话密钥的副本，再将消息发回给客户端。
The authentication service then encrypts the STkt and copy of the session key using the TGT session key and sends the message back to the client.
身份验证服务然后使用TGT会话密钥加密stkt和会话密钥的副本，再将消息发回给客户端。
The authentication service then encrypts the STkt and copy of the session key using the TGT session key and sends the message back to the client.
应用推荐