Krbtgt yog dab tsi thiab nws ua dab tsi?
Krbtgt yog dab tsi thiab nws ua dab tsi?

Video: Krbtgt yog dab tsi thiab nws ua dab tsi?

Video: Krbtgt yog dab tsi thiab nws ua dab tsi?
Video: Построение корпоративной системы управления идентификационной информацией на базе FreeIPA 2024, Kaum ib hlis
Anonim

Txhua Active Directory domain muaj ib qho cuam tshuam KRBTGT account uas yog siv los encrypt thiab kos npe rau tag nrho Kerberos daim pib rau lub sau. Nws yog tus lej sau npe kom txhua tus neeg sau ntawv sau tau paub tus lej password txhawm rau txiav txim siab Kerberos daim pib rau kev siv tau.

Ua raws li qhov no, tus lej Krbtgt siv rau dab tsi?

Cov KRBTGT tus account yog siv rau encrypt thiab kos npe rau tag nrho daim pib Kerberos nyob rau hauv ib tug sau, thiab domain controllers siv tus tus account password rau decrypt Kerberos daim pib rau validation. Qhov no tus account password yeej tsis hloov, thiab tus account lub npe yog tib yam nyob rau hauv txhua tus sau, yog li nws yog lub hom phiaj zoo rau cov neeg tawm tsam.

Dab tsi yog qhov pass qhov pib nres? Taw qhia. Pass-the-ticket attack yog ib txoj kev paub zoo ntawm kev ua tus neeg siv ntawm AD sau. Yeej, lub chaw ua haujlwm / khoom siv hauv AD txheeb xyuas qhov tseeb rau tus tswj hwm los ntawm kev thov TGT daim pib rau nws tus kheej. The TGT daim pib siv tau rau ib lub sij hawm (feem ntau teev) thiab siv los thov ntau dua daim pib.

Yog li ntawd, Krbtgt sawv rau dab tsi?

Kerberos Ticket Generating Ticket Account

Puas yog Krbtgt xiam lossis qhib?

Yog vim li cas KRBTGT account yog neeg tsis taus hauv Windows 2000/2003 Server yog tias tsis muaj laj thawj lossis xav tau rau ib tus neeg nkag rau hauv nrog KRBTGT tus account. Yog li ntawd, nws tsis tuaj yeem ua tau qhib . Vim nws yog ib tug built-in account, koj ua tsis tau pab los yog hloov npe KRBTGT tus account.

Pom zoo: