[4807] in Kerberos
Re: Ticket Granting Ticket
daemon@ATHENA.MIT.EDU (Jonathan I. Kamens)
Wed Mar 15 13:23:37 1995
To: kerberos@MIT.EDU
Date: 15 Mar 1995 18:16:18 GMT
From: jik@cam.ov.com (Jonathan I. Kamens)
In article <3k6q9h$rq5@nms.telepost.no>, Fornavn Etternavn <SNOOLB@calvin.nhidh.nki.no> writes:
|> Who generates the Ticket Granting Ticket?
|> Is it the Kerberos Authentication Server or the
|> Ticket Granting Server?
The Authentication Server is so named because it *authenticates* the user,
using his/her key, and grants an initial ticket. So, to answer your question,
the TGT is generated by the AS; the user subsequently uses the TGS to get
tickets using the TGT. In other words, the TGT is a service ticket for the
TGS.
|> What kind of information is exchanged between the Kerberos
|> Authentication Server and the Ticket Granting Server?
The TGS and AS are generally implemented as part of a single process;
certainly, they're a single process in the MIT Kerberos distribution. They
both have access to the same information, i.e., the Kerberos database. They
don't "exchange" information, because they don't talk to each other; they talk
to clients and to the Kerberos database.
--
Jonathan Kamens | OpenVision Technologies, Inc. | jik@cam.ov.com
