# Kerberos

12 Hacker News commenters recommended Kerberos and 10 criticized it, November 2025 to November 2026. It was recommended in 7 of 13 months.

**Verdict:** People recommend Kerberos for strong network authentication, such as securing NFS mounts. Critics say setup is hard and the protocol is outdated.

## Why people recommend it

- Secures NFS and network filesystems (2 comments): "It is malpractice not to secure NFS mounts (and other network filesystems with sensitive data), and that means Kerberos." ([source](https://news.ycombinator.com/item?id=47638127)) "NFSv4 + OpenLDAP + Kerberos would be the correct answer in this particular case based on OP's concerns" ([source](https://news.ycombinator.com/item?id=46216946))
- Works with OpenLDAP and DNS servers (2 comments): "NFSv4 + OpenLDAP + Kerberos would be the correct answer in this particular case based on OP's concerns" ([source](https://news.ycombinator.com/item?id=46216946)) "I run: OpenLDAP, an MIT Kerberos KDC, and a PowerDNS server." ([source](https://news.ycombinator.com/item?id=47062278))
- Built-in extensibility and deliberate design (2 comments): "The nice thing with kerberos is that it v5 has extensibility effectively built in" ([source](https://news.ycombinator.com/item?id=49801194)) "It's almost like Kerberos was designed and implemented for a reason!" ([source](https://news.ycombinator.com/item?id=48195088))

## What people warn about

- Hard to set up (3 comments): "Setting up Kerberos in 2026 feels somewhat close to malpractice to me." ([source](https://news.ycombinator.com/item?id=47633700)) "I gave up after trying to set up a Kerberos server on the Synology" ([source](https://news.ycombinator.com/item?id=46851742)) "the experience was akin to staring into the sun" ([source](https://news.ycombinator.com/item?id=46143941))
- Protocol design seen as outdated (4 comments): "No one would build KRB4/5 today, it makes no sense." ([source](https://news.ycombinator.com/item?id=46083115)) "But today, in 2026, Kerberos is indefensible." ([source](https://news.ycombinator.com/item?id=49811563)) "The protocol itself is fundamentally flawed." ([source](https://news.ycombinator.com/item?id=46082319))

## Cite as

Hacker Approved, "Kerberos", https://hackerapproved.com/p/kerberos/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).