Please enable JavaScript.

Coggle requires JavaScript to display documents.

Kerberos, Getting the Ticket Granting Ticket, Using Ticket Granting…

- - - - AS checks user ID against database
        
        AS generates secret key using hashed password stored in the KDS
        
        AS uses secret key to encrypt and send message containing the client TGS key and a second message containing the Ticket Granting Ticket.
        
        Client decrypts the first message decrypted by the shared secret key derived from the user password, and decrypts the second message using the client TGS key to get the Ticket Granting Ticket.
        
        Client uses the TGT to request authentication from the TGS server. The TGS server grants access to services in the Kerberos realm.
- - - - TGS decrypts the authenticator message with the client TGS session key.
        
        TGS checks the client ID of the two messages to see if they match.
        
        TGS sends two messages to the client. a. contains the client to server ticket (client ID, client address, validity period, client-server session key encrypted using the service's secret key. b. the client-server session key itself, encrypted using the client TGS session key.
        
        Client sends two messages to the service server (SS) a. the encrypted client to server ticket received from the TGS. b. a new authenticator with the client ID and time stamp encrypted with the client-server session key.
        
        SS decrypts the first message using its secret key to get the client-server session key.
        
        SS uses the client-server session key to decrypt the second message to match the client ID from the authenticator to the one included in the client to server ticket.
        
        1 more item...