Kerberos (contd)

• TGS decrypts authenticator and gives a “service ticket”

  • Gets new session key to be shared between user and server

• Need to access more servers => connect w/ TGS to get service ticket until TGT does not expire

Previous slide

Next slide

Back to first slide

View graphic version