基于LDAP与Kerberos的认证系统研究与设计——广东非物质文化遗产信息管理系统设计

Research and Design of Authentication System Based on LDAP and Kerberos——Design on Information Administration System of Guangdong Incorporeal Cultural Heritage

为了解决现有非物质文化遗产网络资源分散管理系统各自独立,网络用户信息凌乱并严重重复不能得到有效访问控制等问题。通过对现有网络情况、用户使用需求以及网络服务技术进行分析,设计基于LDAP目录服务与Kerberos认证机制相结合的统一认证系统,提出目录管理与跨域访问认证的模式。集中管理系统资源和用户信息,提高了资源利用率和网络系统资源的安全性。

By analyzing the present use of the Internet, the users＇ needs and the Internet service technology, the unified authentication system based on the integration of LDAP and Kerberos is designed, and the modes of directory management and cross-realm access authentication are proposed. By centralized administration of system resources and the users＇ information, the utility of the resources and the security of network system resources are thus enhanced.