Senior LevelWeb Security & Cyber Defense
How does Kerberos authentication work using Ticket Granting Tickets (TGT) and Service Tickets?
❓ Interview Prompt: Explain Kerberos protocol, Key Distribution Center (KDC), Authentication Service (AS), Ticket Granting Ticket (TGT), Service Tickets (ST), and Active Directory security.
Kerberos is a ticket-based network authentication protocol used extensively in Active Directory enterprise networks:
Kerberos Ticket Exchange:
1
Authentication Service (AS): User logs in; KDC verifies password and returns a Ticket Granting Ticket (TGT) encrypted with KDC secret.
2
Ticket Granting Service (TGS): User presents TGT to request a Service Ticket (ST) for a target server ('HTTP/api.corp.local').
3
Service Access: User presents Service Ticket to target server. Target server decrypts ticket and grants access without prompting for password!
Code Implementation Example
bash
# Request Kerberos TGT ticket via kinit CLI:
kinit alice@CORP.EXAMPLE.COM
# List cached Kerberos tickets using klist:
klist💡Obtaining and inspecting Active Directory Kerberos tickets via kinit and klist.
🎯 Interview Key Takeaway
Kerberos uses Ticket Granting Tickets (TGT) and Service Tickets to authenticate users statelessly across enterprise networks.
#Kerberos#Active Directory#Authentication#Senior
Back to all Web Security & Cyber Defense Questions→