AD101
Search…
Kerberos Delegation and Abuse Cases

Definition

Kerberos Delegation allows to reuse the end-user credentials to access the resources hosted on a different server. ex. user authenticates to a web server and web server makes requests to a database server. The web server can request access to resources (all or some resources depending on the type of delegation) on the database server as the user and not as the web server's service account.

Types

There are three types of Kerberos Delegation:
Last modified 5mo ago
Copy link