About Kerberos Authentication
The steps in the process are: A principal name and key are specified to the client. The client sends the principal name and a request for a TGT to the KDC. The KDC generates a session key and a TGT that contains a copy of the session key, and uses the Ticket Granting Service (TGS) key to encrypt the TGT. It then uses the principal's key to encrypt both the already encrypted TGT and another copy of the session key. The KDC sends the encrypted combination of the session key and the encrypted TGT to the client. The client uses the principal's key to extract the session key and the encrypted TGT. When the client want to use a service, usually to obtain access to a local or remote host system, it uses the session key to encrypt a copy of the encrypted TGT, the client's IP address, a time stamp, and a service ticket request, and it sends this item to the KDC. The KDC uses its copies of t...