Why Kerberos
	• LDAP is designed for public information – ACLs can protect userPassword, but… • Kerberos supports password security – Dictionary checks of new passwords – Password expiration • Kerberos useful for other services – Windows authentication – NFS authentication and encryption – AFS