Provide documentation in Upgrade that customers should configure Kerberos instead of NTLM

• Type: Technical Documentation
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: None
• Component/s: Application Security, Application Security > NTLM
• Labels: None
• Sprint: AS | Iteration 7, AS | Iteration 9, AS | Iteration 10, AS | Iteration 11, AS | Iteration 12, AS | Iteration 13, AS | Iteration 14, AS | Iteration 15, AS | Iteration 16, AS | Iteration 17, AS | Iteration 18, AS | Iteration 19
• Type of Documentation: Deployment

We highly recommend stop using NTLM and migrate the authentication to Kerberos.

Kerberos is a computer network authentication protocol that works on the basis of tickets to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner. It's a safer protocol than NTLM and an open standard developed by MIT available on Windows 4.1 and all onwards versions (Windows 2000 and later uses Kerberos as its default authentication method).

If you want to use Kerberos as authentication system on Liferay, no code changes are needed and it's compatible with version 7.0 and onwards of the Portal.

Here is an available guide on how to implement Kerberos as authentication system using LDAP and Token SSO services.