Cross-platform authentication protocol using key encryption to verify identity of clients and to securely
exchange information once a client
logs onto a system
The server issuing keys to clients during initial client authentication is known as a key distribution center (KDC)
In order to authenticate a client, KDC runs an authentication service (AS)
nAn
AS issues a ticket (temporary set of credentials)
A kerberos client, or user, is known as a principal