Customer Reviews
Useful resource - By: P. Martin, 16 Apr 2007 
You'd be hard pressed to find another such comprehensive book on Kerberos.
It might make a good reference book - however, such reference is also widely available online.
Jason Garman has a good conversational style, which will appeal to many. It's a confusing subject & he does his best to put it in an easy to grasp way.
After reading the majority of it, I have a few minor qualms..
- There's a lot of redundant repetition. As a reference this may be a plus point. I got the impression that the book could be slimmed down in a big way. Towards the end he goes through a few application-specific kerberos configurations which won't be useful to many (e.g. Eudora) & it seemed a bit like filler.
- Minor mistakes in places (quick example: the diagram on preventing replay in Needham-Schroeder has labels swapped for Application Server & Client)
- He explains Kerberos 5 by drawing on an earlier explanation of Kerberos 4, which is obsolete. I found this slightly annoying; I'd rather not have to read any more than I have to about Kerberos 4; after alll, it's obsolete.. having said that, some is necessary to understand aspects of v5 which relate to interoperability with v4.
