1. + Attach service request
KERBEROS
Decrypt with key
(Pass hash)
1.KDC
2.Authc
3. TGS
Logon
Request
Secret Key
Date/Time
Ticket Granting
Ticket
Contents:
Client Name
IP etc
Ticket Granting
Ticket
Valid 10 hours
Encrypted with
KDC Secret Key
+ Attach service request
Logon
Request
Time Stamp
Client ID
TGService
Session Key
Date/Time
Encrypt with TGS Key
Application Server
Encrypt with key
(Pass hash)
Encrypted/Decypted
With Key (Pass Hash)
User
Password(hashed)

2. App Server Secret Key 1.KDC 2.Authc 3. TGS Secret Key Service Session
Encrypt with TGS Key
Service Ticket
User In and
Service session key
Encrypted with
App server
Secret Key
Service Ticket
User In and
Service session key
Application Server
Encrypted with
App server
Secret Key
Time Stamped Authz
Encrypted with service session key
App Server
Secret Key