Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Microsoft signs on to MIT Kerberos Consortium

Microsoft joins Apple, Google, and Sun on the executive board of MIT Kerberos Consortium


Microsoft has joined the MIT Kerberos Consortium, an organization that develops the widely used network authentication standard. It joins Apple, Google, and Sun on the consortium's executive board.

Kerberos, which ships with most operating systems, is a suite of authentication protocols that can enable features such as single sign-on, where a single log-in and password can be used to access multiple Web sites or applications. It was developed as part of MIT's Project Athena in the 1980s.

While Microsoft has implemented Kerberos protocols in its Windows 2000, XP, Server 2003, and 2008 and Vista operating systems, the vendor was accused eight years ago of subverting the standard by adding proprietary extensions.

During Microsoft's U.S. antitrust trial, an MIT professor testified the vendor had extended the Kerberos specification used by its Windows 2000 OS such that a non-Microsoft server could not use the security features of the PC's OS.

That evidence contributed to the view that Microsoft gave lip service to the importance of interoperability, but implemented technical blocks that locked out competitors. Microsoft eventually released details on its modifications to Kerberos.

After both U.S. and European antitrust trials, Microsoft forcibly and voluntarily took steps to improve its documentation of protocols as well as open up more of its internal technical details.

Microsoft's participation in the Kerberos Consortium "shows Microsoft's continued and growing desire as of late to work with the open-source community and industry consortiums around interoperability," wrote Tom Kemp, CEO of Centrify, on his blog.

Centrify, a Microsoft partner, makes software called DirectControl that lets servers, workstations, and devices from other vendors use Active Directory, which is Microsoft's authentication and provisioning technology. Authentication is accomplished using Kerberos, Kemp wrote.

Despite embroiling itself in controversy, Microsoft's involvement with Kerberos has also made use of the protocol more widespread, Kemp wrote.

"As we all know there are many out there that like to beat up Microsoft regarding security, but it is ironic that Microsoft by default delivers the added security of Kerberos as part and parcel of the Windows platform," Kemp wrote.


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Virtualization: A Step by Step Approach to Success
Your virtual machines can be up and running in a matter of minutes. HP and Citrix have integrated XenServer with HP ProLiant servers and management tools, powered by hardware-assisted Intel Virtualization Technology to enable high- performance, cost-savings solutions for server consolidation and disaster recovery. Sponsor: HP

»  Click here to view this Webcast
  Storage is big, and getting bigger
The only certainty is that your requirement for storage will never be satisfied. While you clean out space and authorize POs, you might consider another alternative: outsourcing. The best way to deal with storage might be to let someone else deal with it. Sponsored by SGI

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS  IT EXEC-CONNECT   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist