All sheets · Use your browser Print dialog (Ctrl P) and Save as PDF.
Z+
Authentication and identity
Who are you? What may you do? What did you do?
| Topic | Remember |
|---|---|
| Factors | Know / have / are. Two passwords are still knowledge. |
| RADIUS | UDP 1812 checks in; 1813 records the visit. |
| TACACS+ | TCP 49, often device administration. |
| Kerberos | Gate 88: TGT then service ticket. Master ticket is not the password. Needs time sync. |
| SSO vs federation | SSO is the experience; federation is trust across domains. |
| SAML | IdP identifies; SP serves; SAML carries the assertion. |
| LDAP | Ask the directory. 389 ordinary; 636 implicit TLS; StartTLS may protect 389. |
| 802.1X | Supplicant asks; authenticator guards; server decides. Not port 8021. |
| NAS | In AAA context: Network Access Server, not storage. |
| RBAC | Role gets rights. Not the same as firewall packet filtering. |