Does Kerberos only encrypt authentication or all client communications?

Question

Does Kerberos protect only the authentication process or all client communications?

I had the impression that this looked like a VPN for a local network.

So all LAN communications are encrypted. Just like the whole Internet connection is encrypted using a VPN.

Relations Aubrey

Answer 1

Kerberos is quite capable of encrypting traffic between the client and server, but depending on how Kerberos is used in the application, it may or may not use kerberos session keys to encrypt traffic.

kerberos , . , GSSAPI. . gss_wrap

GSSAPI - API . Kerberos GSSAPI.

GSSAPI kerberos, , , TLS .

Kerberos / tcp (, telnet ssh). API , . Kerberos , .

Answer 2

Kerberos - , . , ( ), . , , , VPN .

Kerberos , , . , , Kerberos , , .

, usa-case, , Kerberos - .

, Kerberos VPN, , , " " , Kerberos - .

, Active Directory, Kerberos, . , TLS.

, , , IPsec Kerberos . , , Kerberos .