tailieunhanh - hack attacks testing how to conduct your own security phần 2

Tin tưởng rõ ràng là mối quan hệ tin cậy mà bạn tạo ra, trái ngược với tin tưởng được tạo ra tự động trong khi cài đặt một bộ điều khiển miền. Bạn tạo và quản lý tin tưởng rõ ràng bằng cách sử dụng miền Active Directory và tiện ích Trusts. Có hai loại tin tưởng rõ ràng: | Basic Windows 2000 Windows 2000 Server Installation and Configuration 39 Explicit trusts are trust relationships that you create yourself as opposed to trusts created automatically during installation of a domain controller. You create and manage explicit trusts using the Active Directory Domains and Trusts utility. There are two kinds of explicit trusts external and shortcut. External trusts enable user authentication to a domain outside of a forest. External trusts establish trust relationships to domains outside the forest. The benefit of creating external trusts is to enable user authentication to a domain not encompassed by the trust paths of a forest. All external trusts are one-way nontransitive trusts. You can combine 2 one-way trusts to create a two-way trust relationship. Before an account can be granted access to resources by a domain controller of another domain Windows 2000 must determine whether the domain containing the desired resources the target domain has a trust relationship with the domain in which the account is located the source domain . To make this determination for two domains in a forest Windows 2000 computes a trust path between the domain controllers for these source and target domains. A trust path is the series of domain trust relationships that must be traversed by Windows 2000 security to pass authentication requests between any two domains. Computing and traversing a trust path between domain trees in a complex forest can take time although the amount of time can be reduced with shortcut trusts. Shortcut trusts are two-way transitive trusts that enable you to shorten the path in a complex forest. You explicitly create shortcut trusts between Windows 2000 domains in the same forest. A shortcut trust is a performance optimization that shortens the trust path for Windows 2000 security to take for authentication purposes. The most effective use of shortcut trusts is between two domain trees in a forest. You can also create multiple .