Skip to content

INTRODUCTION

Kerberos is a network authentication protocol that uses secret-key cryptography to provide secure authentication for client/server applications. It employs a trusted third-party, the Key Distribution Center (KDC), to issue tickets that validate user identities, protecting against eavesdropping and replay attacks. Kerberos is commonly integrated into secure operating environments, such as Microsoft Windows, to safeguard user data and services.

KEY COMPONENTS

COMPONENT DESCRIPTION
KDC (Key Distribution Center) Central authority for issuing session keys and tickets.
TGT (Ticket Granting Ticket) Issued by the KDC to request service tickets from the TGS.
TGS (Ticket Granting Service) A KDC component that issues service tickets for accessing services.
Service Ticket Grants user access to network services.

COMMON KERBEROS COMMANDS

Key commands for managing Kerberos protocol.

COMPONENT DESCRIPTION
kinit [username] Obtains a Ticket-Granting Ticket (TGT) for the user and saves it in the cache.
klist Displays all cached Kerberos tickets.
ktutil Utility for managing Kerberos keytab files.
kdestroy Removes all cached Kerberos tickets for the user.