This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
TGS Exchange
TGS Exchange

Version management

Difference between version and

At line 1 added 21 lines
!!! Overview [1]
[{$pagename}] ([TGS-REQ-REP]) is the [Authentication Method] between the [Ticket Granting Service] and the [Kerberos] [Client] when requesting access to a [Resource][{$pagename}] includes:
* [TGS_REQ]
* [TGS_REP]
[Kerberos] requires a [Service Ticket] be presented to the [Service Provider] to obtain access to a [Resource]
The [client] presents the [Ticket Granting Ticket] to the [Ticket Granting Service] when desiring access to a [Protected Resource] on a [Service Provider].
The [Ticket Granting Service] [authenticates] the user's [Ticket Granting Ticket] and creates a [Service Ticket] and [Client-To-Server Session Key] for both the [client] and the remote [Service Provider]. The [Service Ticket] may be stored in [cache] on the [local device].
The [Ticket Granting Service] receives the client's [Ticket Granting Ticket] and reads it using its own key.
If the [Ticket Granting Service] approves of the client's request, a [Service Ticket] is generated for both the [client] and the target [Service Provider].
!! After [{$pagename}]
Only when the [Client] [Service Ticket] and [Client-To-Server Session Key] are obtained can the [Client] attempt to access a [Protected Resource] using the [Client-Server Exchange]!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [Kerberos Explained|https://msdn.microsoft.com/en-us/library/bb742516.aspx|target='_blank'] - based on information obtained 2007-04-21-
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop