First page Back Continue Last page Overview Graphics
Scaling Kerberos
To scale, divide the network into realms each having its own AS and its own TGS
To allow for cross-realm authentication, i.e., to allow users in one realm to access services in another, the user's realm may register a remote TGS (RTGS) in the service's realm
To reduce cross-realm registration, use a hierarchy of realms