使用 Windows 会话凭据作为登录？它是如何运作的？
我遇到过像 ARCserve HA 这样的程序，它使用 Windows 会话凭据作为登录名，而无需我手动输入用户 ID 和密码。这是如何运作的？？该程序实际上能够获取我的窗口的用户 ID 和密码？
由于我当前用 Java 编写的项目要求我执行类似的操作，使用 Windows 会话凭据作为登录。
谁能向我提供有关我应该如何执行此操作的任何指示？任何指示将不胜感激。
编辑
也许我还应该包括ARCserve HA启动IE，从那里我检查选项“Windows会话凭据”作为登录。希望这些附加信息可能有所帮助。
凯文
I came across programs like ARCserve HA, which use windows session credentials as the login without having me to manually type in the userID and password. How does this work?? The program is actually capable of getting my window's userID and password??
As my current project which is written in Java requires me to do something similar which uses the windows session credentials as login.
Could anyone provide me with any directions on how should i go about doing this? Any directions will be greatly appreciated.
EDIT
Maybe i should also include that ARCserve HA launches IE, from there i check the option "windows session credentials" as login. Hopefully this additional info might help.
Kevin
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
当 Windows 是活动目录域的一部分时，它使用 Kerberos 执行身份验证和单点登录用于服务。
查看 Spnego，了解 Java 中的集成 Windows 身份验证。
如果您想了解 Kerberos 的工作原理，请查看此链接效果好一点。
最重要的是，Kerberos 传递票证并且从不发送您的密码。一旦您在 Windows 登录屏幕上登录，就会创建一个票证，您可以传递该票证以登录其他资源。这就是为什么一旦登录，访问网络共享时就不需要进行身份验证的原因。票证系统还可以防止您的密码存储在 RAM 中。
When Windows is part of an active directory domain it uses Kerberos to perform authentication and single sign for services.
Take a look at Spnego for integrated Windows authentication in Java.
Take a look at this link if you want to understand how Kerberos works a little better.
Bottom line, Kerberos passes a ticket around and never sends your password. Once you login at the Windows login screen a ticket is created and you can pass that around to login to other resources. This is why once you login you do not need to authenticate when you access a network share. The ticket system also prevents your password from being stored in RAM.