AP_REQ is the initial user authentication request (i.e. made with kinit) and the message is directed to the KDC component known as Kerberos Authentication Service (AS)

The AP_REQ and AP_REP are ASN.1 structures used by application client and servers to for Authentication. The structures contain auxiliary information, together with an authenticator which is the real cryptographic proof.

More Information#

There might be more information for this subject on one of the following: