!!! Overview
[{$pagename}] is a [Kerberos] service provide supplies [session] tickets and temporary [Session Keys]

The [{$pagename}] contains three components : 
* [Authentication Service|AS] - authenticate users and [Service Providers]
* [Ticket Granting Service] - distribute tickets based on the information stored in its [Kerberos Database]
* [Kerberos Database]- Often a [LDAP] Server

A [{$pagename}] can be associated to only one [Kerberos Realm].

!! [{$pagename}] and [Microsoft Active Directory]
[Kerberos] [Key Distribution Center] ([KDC]) is a network service on all [Domain Controllers] within the [Local Security Authority Subsystem Service] ([LSASS]) process that supplies session tickets and temporary session keys to users and computers within an [Microsoft Active Directory] [domain|AD DOMAIN]. The KDC runs on __every__ [Domain Controller] as part of [Active Directory Domain Services|Microsoft Active Directory] ([AD] [LDS]).

The [Security Account Manager] ([SAM]) database on the [Windows Client] is used to [authenticate] requests from the [{$pagename}]. The [SAM] database [MUST] be available for the [Kerberos] client [authentication] request to succeed.

!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]