简体繁体 English

AuthenticationTypes.SecureSocketsLayer和AuthenticationTypes.Secure有什么区别？

[英]What is the difference between AuthenticationTypes.SecureSocketsLayer and AuthenticationTypes.Secure?

原文 2015-01-15 14:50:51 3 1 c#/ asp.net/ active-directory/ ldap

I read about the two types in MSDN : 我了解了MSDN中的两种类型：

http://msdn.microsoft.com/en-us/library/system.directoryservices.authenticationtypes%28v=vs.110%29.aspx http://msdn.microsoft.com/en-us/library/system.directoryservices.authenticationtypes%28v=vs.110%29.aspx

Yet, I'm not completly sure I understand the difference. 但是，我不确定是否完全了解其中的区别。

Please tell me if I understand correctly, 请告诉我我是否理解正确，

AuthenticationTypes.SecureSocketsLayer is used to secure the packets sent in via the ldap communication. AuthenticationTypes.SecureSocketsLayer用于保护通过ldap通信发送的数据包。

AuthenticationTypes.Secure is used to secure the connection, ie prevent from attacker to use an ldap query without authentication. AuthenticationTypes.Secure用于保护连接，即防止攻击者使用未经身份验证的ldap查询。

Thank you 谢谢

1 个解决方案

AuthenticationTypes.SecureSocketsLayer uses SSL which uses the certificate to authenticate and the traffic is encrypted. AuthenticationTypes.SecureSocketsLayer使用SSL，该SSL使用证书进行身份验证，并且对通信进行加密。 So by AuthenticationTypes.SecureSocketsLayer it's already "secured". 因此，通过AuthenticationTypes.SecureSocketsLayer，它已经“受保护”。

For AuthenticationTypes.Secure, it uses the NTLM or Kerberos to authenticate (so the passwords are encrypted). 对于AuthenticationTypes.Secure，它使用NTLM或Kerberos进行身份验证（因此密码已加密）。 But other traffic (like what objects are requested, their attribute names and values) are not encrypted. 但是其他流量（如请求的对象，其属性名称和值）未加密。 To encrypt, need to specify the also Sealing flag (together with Secure). 要加密，还需要指定Sealing标志（与Secure一起使用）。 But this requires Kerberos. 但这需要Kerberos。

The 2 flags are referring to different way to secure the connection, so won't be used together normally (I never tried putting them together). 这两个标志所指的是确保连接安全的不同方法，因此通常不会一起使用（我从未尝试将它们组合在一起）。